{ "collection": { "href": "http://172.30.2.78:1664/api/v1/search?type=command&threatfamily=compliance&status=done&report=complianceitems&limit=100000&after=2014-05-30T10:50:00-04:00&before=2014-05-30T23:59:59-04:00", "items": [ { "data": [ { "name": "compliance items", "value": [ { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232265601776819", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.907745Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232265601776819", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.907745Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232265601776819", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.907745Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232265601776819", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.907745Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232265601776819", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.907745Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232265601776819", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.907745Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232265258945480", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.05257Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232265258945480", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.05257Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232265258945480", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.05257Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232265258945480", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.05257Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232265258945480", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.05257Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232265258945480", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.05257Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232264279658596", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.575013Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232264279658596", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.575013Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232264279658596", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.575013Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232264279658596", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.575013Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232264279658596", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.575013Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232264279658596", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.575013Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232264248787567", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.013082Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232264248787567", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.013082Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232264248787567", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.013082Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232264248787567", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.013082Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232264248787567", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.013082Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232264248787567", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.013082Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263972614134", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.945626Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263972614134", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.945626Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263972614134", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.945626Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263972614134", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.945626Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263972614134", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.945626Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263972614134", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.945626Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263896464410", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.920507Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263896464410", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.920507Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263896464410", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.920507Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263896464410", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.920507Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263896464410", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.920507Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263896464410", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.920507Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263696992549", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.548017Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263696992549", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.548017Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263696992549", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.548017Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263696992549", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.548017Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263696992549", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.548017Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263696992549", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.548017Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263526603749", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.895194Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263526603749", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.895194Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263526603749", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.895194Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263526603749", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.895194Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263526603749", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.895194Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263526603749", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.895194Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263344662964", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.915844Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263344662964", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.915844Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263344662964", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.915844Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263344662964", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.915844Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232263344662964", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.915844Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232263344662964", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.915844Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262963389325", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.135792Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262963389325", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.135792Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262963389325", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.135792Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262963389325", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.135792Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262963389325", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.135792Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262963389325", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.135792Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262868748532", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.025683Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262868748532", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.025683Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262868748532", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.025683Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262868748532", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.025683Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262868748532", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.025683Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262868748532", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.025683Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262557846087", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.972378Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262557846087", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.972378Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262557846087", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.972378Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262557846087", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.972378Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262557846087", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.972378Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262557846087", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.972378Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262491715400", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.953285Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262491715400", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.953285Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262491715400", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.953285Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262491715400", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.953285Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262491715400", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.953285Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262491715400", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.953285Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262473300356", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.653139Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262473300356", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.653139Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262473300356", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.653139Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262473300356", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.653139Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262473300356", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.653139Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262473300356", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.653139Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262409896655", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.748127Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262409896655", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.748127Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262409896655", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.748127Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262409896655", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.748127Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262409896655", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.748127Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262409896655", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.748127Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262296883786", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.619219Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262296883786", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.619219Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262296883786", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.619219Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262296883786", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.619219Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262296883786", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.619219Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262296883786", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.619219Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262279774401", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.06162Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262279774401", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.06162Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262279774401", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.06162Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262279774401", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.06162Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262279774401", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.06162Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262279774401", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.06162Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262250089791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.963487Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262250089791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.963487Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262250089791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.963487Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262250089791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.963487Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262250089791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.963487Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262250089791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.963487Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262240347134", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.823894Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262240347134", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.823894Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262240347134", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.823894Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262240347134", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.823894Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262240347134", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.823894Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262240347134", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.823894Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262229695393", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.847905Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262229695393", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.847905Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262229695393", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.847905Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262229695393", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.847905Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262229695393", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.847905Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262229695393", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.847905Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262184568537", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.375619Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262184568537", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.375619Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262184568537", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.375619Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262184568537", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.375619Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262184568537", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.375619Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262184568537", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.375619Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262138373745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.706314Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262138373745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.706314Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262138373745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.706314Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262138373745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.706314Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262138373745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.706314Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262138373745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.706314Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262124151739", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.043871Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262124151739", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.043871Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262124151739", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.043871Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262124151739", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.043871Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262124151739", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.043871Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262124151739", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.043871Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262093982839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.828099Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262093982839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.828099Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262093982839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.828099Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262093982839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.828099Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262093982839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.828099Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262093982839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.828099Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262065168244", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.983794Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262065168244", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.983794Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262065168244", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.983794Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262065168244", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.983794Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262065168244", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.983794Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262065168244", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.983794Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262000313816", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.5619Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262000313816", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.5619Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262000313816", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.5619Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232262000313816", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.5619Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262000313816", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.5619Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232262000313816", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.5619Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261962072540", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.768425Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261962072540", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.768425Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261962072540", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.768425Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261962072540", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.768425Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261962072540", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.768425Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261962072540", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.768425Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261958244649", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.54038Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261958244649", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.54038Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261958244649", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.54038Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261958244649", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.54038Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261958244649", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.54038Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261958244649", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.54038Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261828974246", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.988711Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261828974246", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.988711Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261828974246", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.988711Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261828974246", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.988711Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261828974246", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.988711Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261828974246", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.988711Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261817550987", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.90377Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261817550987", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.90377Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261817550987", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.90377Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261817550987", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.90377Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261817550987", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.90377Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261817550987", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.90377Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261786405070", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.63054Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261786405070", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.63054Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261786405070", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.63054Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261786405070", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.63054Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261786405070", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.63054Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261786405070", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.63054Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261714158891", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.743411Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261714158891", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.743411Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261714158891", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.743411Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261714158891", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.743411Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261714158891", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.743411Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261714158891", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.743411Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261639516108", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.081124Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261639516108", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.081124Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261639516108", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.081124Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261639516108", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.081124Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261639516108", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.081124Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261639516108", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.081124Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261618694493", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.074028Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261618694493", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.074028Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261618694493", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.074028Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261618694493", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.074028Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261618694493", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.074028Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261618694493", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.074028Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261616855574", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.98036Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261616855574", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.98036Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261616855574", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.98036Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261616855574", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.98036Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261616855574", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.98036Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261616855574", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.98036Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261559765175", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.544093Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261559765175", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.544093Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261559765175", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.544093Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261559765175", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.544093Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261559765175", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.544093Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261559765175", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.544093Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261540056496", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.759367Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261540056496", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.759367Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261540056496", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.759367Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261540056496", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.759367Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261540056496", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.759367Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261540056496", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.759367Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261438747120", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.691809Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261438747120", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.691809Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261438747120", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.691809Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261438747120", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.691809Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261438747120", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.691809Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261438747120", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.691809Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261414904247", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.029756Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261414904247", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.029756Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261414904247", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.029756Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261414904247", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.029756Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261414904247", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.029756Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261414904247", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.029756Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261330940958", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.884972Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261330940958", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.884972Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261330940958", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.884972Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261330940958", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.884972Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261330940958", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.884972Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261330940958", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.884972Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261330250711", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.871784Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261330250711", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.871784Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261330250711", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.871784Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261330250711", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.871784Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261330250711", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.871784Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261330250711", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.871784Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261298031885", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.993939Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261298031885", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.993939Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261298031885", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.993939Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261298031885", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.993939Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261298031885", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.993939Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261298031885", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.993939Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261286934356", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.56979Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261286934356", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.56979Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261286934356", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.56979Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261286934356", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.56979Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261286934356", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.56979Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261286934356", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.56979Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261278816036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.677613Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261278816036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.677613Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261278816036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.677613Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261278816036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.677613Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261278816036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.677613Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261278816036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.677613Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261272800772", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.557548Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261272800772", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.557548Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261272800772", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.557548Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261272800772", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.557548Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261272800772", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.557548Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261272800772", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.557548Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261240982684", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.478508Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261240982684", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.478508Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261240982684", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.478508Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261240982684", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.478508Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261240982684", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.478508Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261240982684", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.478508Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261171129713", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.644331Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261171129713", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.644331Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261171129713", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.644331Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261171129713", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.644331Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261171129713", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.644331Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261171129713", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.644331Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261111581759", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.565954Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261111581759", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.565954Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261111581759", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.565954Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261111581759", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.565954Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261111581759", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.565954Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261111581759", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.565954Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261088528124", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.88083Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261088528124", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.88083Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261088528124", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.88083Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261088528124", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.88083Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261088528124", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.88083Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261088528124", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.88083Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261064704642", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.949359Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261064704642", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.949359Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261064704642", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.949359Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261064704642", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.949359Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261064704642", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.949359Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261064704642", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.949359Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261061352290", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.056588Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261061352290", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.056588Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261061352290", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.056588Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261061352290", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.056588Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261061352290", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.056588Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261061352290", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.056588Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261020505546", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.860218Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261020505546", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.860218Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261020505546", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.860218Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232261020505546", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.860218Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261020505546", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.860218Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232261020505546", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.860218Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260966336842", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.126995Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260966336842", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.126995Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260966336842", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.126995Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260966336842", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.126995Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260966336842", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.126995Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260966336842", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.126995Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260940364818", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.552132Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260940364818", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.552132Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260940364818", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.552132Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260940364818", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.552132Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260940364818", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.552132Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260940364818", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.552132Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260928346612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.003889Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260928346612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.003889Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260928346612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.003889Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260928346612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.003889Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260928346612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.003889Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260928346612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.003889Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260824423114", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.59286Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260824423114", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.59286Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260824423114", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.59286Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260824423114", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.59286Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260824423114", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.59286Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260824423114", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.59286Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260759819786", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.634659Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260759819786", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.634659Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260759819786", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.634659Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260759819786", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.634659Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260759819786", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.634659Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260759819786", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.634659Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260741956067", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.776968Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260741956067", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.776968Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260741956067", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.776968Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260741956067", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.776968Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260741956067", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.776968Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260741956067", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.776968Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260716476132", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.67222Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260716476132", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.67222Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260716476132", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.67222Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260716476132", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.67222Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260716476132", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.67222Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260716476132", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.67222Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260715652277", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.604099Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260715652277", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.604099Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260715652277", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.604099Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260715652277", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.604099Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260715652277", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.604099Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260715652277", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.604099Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260675345162", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.579228Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260675345162", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.579228Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260675345162", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.579228Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260675345162", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.579228Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260675345162", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.579228Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260675345162", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.579228Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260671075636", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.957598Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260671075636", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.957598Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260671075636", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.957598Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260671075636", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.957598Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260671075636", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.957598Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260671075636", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.957598Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260636143665", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:41.763614Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260636143665", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:41.763614Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260636143665", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:41.763614Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260636143665", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:41.763614Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260636143665", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:41.763614Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260636143665", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:41.763614Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260581943104", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.836359Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260581943104", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.836359Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260581943104", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.836359Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260581943104", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.836359Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260581943104", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.836359Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260581943104", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.836359Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260530138562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.90027Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260530138562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.90027Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260530138562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.90027Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260530138562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.90027Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260530138562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.90027Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260530138562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.90027Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260518421168", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.039883Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260518421168", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.039883Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260518421168", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.039883Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260518421168", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.039883Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260518421168", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.039883Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260518421168", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.039883Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260494816527", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.87579Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260494816527", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.87579Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260494816527", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.87579Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260494816527", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.87579Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260494816527", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.87579Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260494816527", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.87579Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260463818474", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.820341Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260463818474", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.820341Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260463818474", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.820341Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260463818474", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.820341Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260463818474", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.820341Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260463818474", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.820341Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260426816562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.614307Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260426816562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.614307Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260426816562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.614307Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260426816562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.614307Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260426816562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.614307Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260426816562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.614307Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260407676542", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.662162Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260407676542", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.662162Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260407676542", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.662162Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260407676542", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.662162Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260407676542", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.662162Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260407676542", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.662162Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260403035854", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.017549Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260403035854", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.017549Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260403035854", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.017549Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260403035854", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.017549Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260403035854", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.017549Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260403035854", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.017549Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260395180014", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.583666Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260395180014", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.583666Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260395180014", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.583666Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260395180014", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.583666Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260395180014", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.583666Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260395180014", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.583666Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260336701423", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.535679Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260336701423", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.535679Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260336701423", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.535679Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260336701423", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.535679Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260336701423", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.535679Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260336701423", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.535679Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260303754896", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.60927Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260303754896", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.60927Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260303754896", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.60927Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260303754896", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.60927Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260303754896", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.60927Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260303754896", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.60927Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260231459557", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.667506Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260231459557", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.667506Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260231459557", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.667506Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260231459557", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.667506Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260231459557", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.667506Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260231459557", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.667506Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260140956612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.509642Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260140956612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.509642Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260140956612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.509642Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260140956612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.509642Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260140956612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.509642Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260140956612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.509642Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260108953307", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.048355Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260108953307", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.048355Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260108953307", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.048355Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260108953307", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.048355Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260108953307", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.048355Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260108953307", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.048355Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260100505571", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.52558Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260100505571", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.52558Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260100505571", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.52558Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260100505571", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.52558Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260100505571", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.52558Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260100505571", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.52558Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260097386544", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.657213Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260097386544", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.657213Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260097386544", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.657213Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260097386544", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.657213Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260097386544", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.657213Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260097386544", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.657213Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260049021301", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.597498Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260049021301", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.597498Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260049021301", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.597498Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260049021301", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.597498Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260049021301", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.597498Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260049021301", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.597498Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260040220698", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.940913Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260040220698", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.940913Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260040220698", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.940913Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260040220698", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.940913Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260040220698", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.940913Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260040220698", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.940913Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260040199036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.772653Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260040199036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.772653Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260040199036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.772653Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260040199036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.772653Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232260040199036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.772653Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232260040199036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.772653Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259946216087", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.867918Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259946216087", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.867918Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259946216087", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.867918Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259946216087", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.867918Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259946216087", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.867918Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259946216087", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.867918Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259930752055", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.7529Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259930752055", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.7529Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259930752055", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.7529Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259930752055", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.7529Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259930752055", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.7529Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259930752055", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.7529Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259912992839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.863952Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259912992839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.863952Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259912992839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.863952Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259912992839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.863952Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259912992839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.863952Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259912992839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.863952Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259837454131", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.928157Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259837454131", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.928157Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259837454131", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.928157Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259837454131", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.928157Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259837454131", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.928157Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259837454131", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.928157Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259825289731", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.639426Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259825289731", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.639426Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259825289731", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.639426Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259825289731", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.639426Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259825289731", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.639426Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259825289731", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.639426Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259803563829", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.096445Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259803563829", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.096445Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259803563829", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.096445Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259803563829", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.096445Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259803563829", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.096445Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259803563829", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.096445Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259678300138", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.623718Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259678300138", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.623718Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259678300138", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.623718Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259678300138", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.623718Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259678300138", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.623718Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259678300138", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.623718Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259646606837", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.924311Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259646606837", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.924311Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259646606837", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.924311Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259646606837", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.924311Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259646606837", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.924311Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259646606837", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.924311Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259637986022", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.832123Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259637986022", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.832123Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259637986022", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.832123Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259637986022", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.832123Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259637986022", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.832123Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259637986022", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.832123Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259605327485", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.101211Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259605327485", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.101211Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259605327485", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.101211Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259605327485", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.101211Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259605327485", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.101211Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259605327485", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.101211Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259551289421", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.13122Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259551289421", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.13122Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259551289421", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.13122Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259551289421", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.13122Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259551289421", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.13122Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259551289421", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:42.13122Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259483625270", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.529523Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259483625270", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.529523Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259483625270", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.529523Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259483625270", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.529523Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259483625270", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.529523Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259483625270", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.529523Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259475229379", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.008186Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259475229379", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.008186Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259475229379", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.008186Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259475229379", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.008186Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259475229379", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.008186Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259475229379", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.008186Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259431146201", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.851722Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259431146201", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.851722Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259431146201", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.851722Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259431146201", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.851722Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259431146201", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.851722Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259431146201", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.851722Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259367565744", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.695925Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259367565744", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.695925Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259367565744", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.695925Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259367565744", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.695925Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259367565744", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.695925Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259367565744", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.695925Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259302448501", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.936448Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259302448501", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.936448Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259302448501", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.936448Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259302448501", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.936448Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259302448501", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.936448Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259302448501", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.936448Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259275808333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.999829Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259275808333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.999829Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259275808333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.999829Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259275808333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.999829Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259275808333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.999829Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259275808333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.999829Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259222318383", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.855815Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259222318383", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.855815Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259222318383", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.855815Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259222318383", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.855815Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259222318383", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.855815Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259222318383", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.855815Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259176382745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.588638Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259176382745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.588638Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259176382745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.588638Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259176382745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.588638Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259176382745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.588638Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259176382745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.588638Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259153284449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.840338Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259153284449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.840338Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259153284449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.840338Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259153284449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.840338Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259153284449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.840338Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259153284449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.840338Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259066864292", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.021935Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259066864292", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.021935Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259066864292", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.021935Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259066864292", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.021935Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259066864292", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.021935Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259066864292", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.021935Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259038224541", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.96781Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259038224541", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.96781Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259038224541", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.96781Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259038224541", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.96781Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259038224541", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.96781Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259038224541", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.96781Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259029111053", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.844091Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259029111053", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.844091Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259029111053", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.844091Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259029111053", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.844091Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259029111053", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.844091Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259029111053", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.844091Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259020190647", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.648869Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259020190647", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.648869Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259020190647", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.648869Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259020190647", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.648869Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259020190647", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.648869Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259020190647", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.648869Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259013182823", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.816535Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259013182823", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.816535Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259013182823", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.816535Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259013182823", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.816535Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232259013182823", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.816535Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232259013182823", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.816535Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258995728958", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.682141Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258995728958", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.682141Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258995728958", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.682141Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258995728958", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.682141Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258995728958", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.682141Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258995728958", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.682141Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258970102322", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:41.686887Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258970102322", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:41.686887Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258970102322", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:41.686887Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258970102322", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:41.686887Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258970102322", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:41.686887Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258970102322", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:41.686887Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258954646824", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.139546Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258954646824", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.139546Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258954646824", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.139546Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258954646824", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.139546Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258954646824", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.139546Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258954646824", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.139546Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258922745904", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.091487Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258922745904", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.091487Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258922745904", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.091487Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258922745904", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.091487Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258922745904", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.091487Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258922745904", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.091487Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258750987453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.891116Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258750987453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.891116Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258750987453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.891116Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258750987453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.891116Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258750987453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.891116Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258750987453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.891116Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258698890268", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.515516Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258698890268", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.515516Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258698890268", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.515516Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258698890268", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.515516Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258698890268", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.515516Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258698890268", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.515516Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258690425909", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.781365Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258690425909", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.781365Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258690425909", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.781365Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258690425909", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.781365Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258690425909", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.781365Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258690425909", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.781365Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258660690348", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.976509Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258660690348", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.976509Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258660690348", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.976509Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258660690348", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.976509Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258660690348", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.976509Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258660690348", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.976509Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258611613024", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.931835Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258611613024", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.931835Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258611613024", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.931835Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258611613024", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.931835Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258611613024", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.931835Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258611613024", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.931835Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258578034482", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.035325Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258578034482", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.035325Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258578034482", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.035325Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258578034482", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.035325Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258578034482", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.035325Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258578034482", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:42.035325Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258412094575", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:42.086642Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258412094575", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:42.086642Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258412094575", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:42.086642Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258412094575", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:42.086642Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258412094575", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:42.086642Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258412094575", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:42.086642Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258329818176", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.701409Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258329818176", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.701409Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258329818176", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.701409Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258329818176", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.701409Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258329818176", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.701409Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258329818176", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:41.701409Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check root login is off", "test": { "type": "regex", "value": "(?i)^permitrootlogin no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258303486839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.520314Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check x11 forwarding is off", "test": { "type": "regex", "value": "(?i)^x11forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258303486839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.520314Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "only allow protocol 2", "test": { "type": "regex", "value": "(?i)^protocol 2$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258303486839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.520314Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check for verbose logging (logs fingerprints)", "test": { "type": "regex", "value": "(?i)^loglevel verbose$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258303486839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.520314Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check password usage is off", "test": { "type": "regex", "value": "(?i)^passwordauthentication no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232258303486839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.520314Z" }, { "check": { "description": "compliance check for openssh", "location": "/etc/ssh/sshd_config", "name": "check privsep is on", "test": { "type": "regex", "value": "(?i)^useprivilegeseparation yes$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232258303486839", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:41.520314Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219612301715", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.875076Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219612301715", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.875076Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219612301715", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.875076Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219612301715", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.875076Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219612301715", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.875076Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219479954146", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.554533Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219479954146", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.554533Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219479954146", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.554533Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219479954146", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.554533Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219479954146", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.554533Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219360234562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.597223Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219360234562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.597223Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219360234562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.597223Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219360234562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.597223Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219360234562", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.597223Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219359211944", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.869906Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219359211944", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.869906Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219359211944", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.869906Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219359211944", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.869906Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219359211944", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.869906Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219358818916", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.560019Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219358818916", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.560019Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219358818916", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.560019Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219358818916", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.560019Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219358818916", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.560019Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219253283673", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.456008Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219253283673", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.456008Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219253283673", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.456008Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219253283673", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.456008Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219253283673", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.456008Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219253170565", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.861536Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219253170565", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.861536Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219253170565", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.861536Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219253170565", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.861536Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219253170565", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.861536Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219249438187", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.537028Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219249438187", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.537028Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219249438187", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.537028Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219249438187", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.537028Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219249438187", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.537028Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219238423606", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.591867Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219238423606", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.591867Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219238423606", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.591867Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219238423606", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.591867Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219238423606", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.591867Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219190597653", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.428139Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219190597653", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.428139Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219190597653", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.428139Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219190597653", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.428139Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219190597653", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.428139Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219172981594", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.390027Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219172981594", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.390027Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219172981594", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.390027Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219172981594", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.390027Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219172981594", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.390027Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219153406613", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:32.005386Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219153406613", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:32.005386Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219153406613", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:32.005386Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219153406613", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:32.005386Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219153406613", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:32.005386Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219128512151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.41078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219128512151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.41078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219128512151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.41078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219128512151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.41078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219128512151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.41078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219046828713", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.954942Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219046828713", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.954942Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219046828713", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.954942Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219046828713", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.954942Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219046828713", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.954942Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219026924844", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.826709Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219026924844", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.826709Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219026924844", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.826709Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219026924844", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.826709Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232219026924844", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.826709Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218990780161", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.360718Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218990780161", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.360718Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218990780161", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.360718Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218990780161", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.360718Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218990780161", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.360718Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218918804459", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.976662Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218918804459", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.976662Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218918804459", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.976662Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218918804459", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.976662Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218918804459", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.976662Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218903719321", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.51714Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218903719321", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.51714Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218903719321", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.51714Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218903719321", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.51714Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218903719321", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.51714Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218903075061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.587072Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218903075061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.587072Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218903075061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.587072Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218903075061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.587072Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218903075061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.587072Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218873994933", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.436464Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218873994933", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.436464Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218873994933", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.436464Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218873994933", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.436464Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218873994933", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.436464Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218868028911", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:31.68857Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218868028911", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:31.68857Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218868028911", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:31.68857Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218868028911", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:31.68857Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218868028911", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:31.68857Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218863113521", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.830873Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218863113521", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.830873Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218863113521", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.830873Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218863113521", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.830873Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218863113521", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.830873Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218802701047", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.365964Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218802701047", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.365964Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218802701047", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.365964Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218802701047", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.365964Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218802701047", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.365964Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218712610391", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.624311Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218712610391", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.624311Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218712610391", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.624311Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218712610391", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.624311Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218712610391", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.624311Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218701378228", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.415375Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218701378228", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.415375Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218701378228", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.415375Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218701378228", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.415375Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218701378228", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.415375Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218638238978", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.582105Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218638238978", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.582105Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218638238978", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.582105Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218638238978", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.582105Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218638238978", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.582105Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218608072191", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.544637Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218608072191", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.544637Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218608072191", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.544637Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218608072191", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.544637Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218608072191", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.544637Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218579669692", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.695741Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218579669692", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.695741Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218579669692", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.695741Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218579669692", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.695741Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218579669692", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.695741Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218572373984", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.609691Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218572373984", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.609691Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218572373984", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.609691Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218572373984", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.609691Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218572373984", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.609691Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218563854897", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.577489Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218563854897", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.577489Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218563854897", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.577489Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218563854897", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.577489Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218563854897", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.577489Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218516305475", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:32.000367Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218516305475", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:32.000367Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218516305475", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:32.000367Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218516305475", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:32.000367Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218516305475", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:32.000367Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218444122133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.503117Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218444122133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.503117Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218444122133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.503117Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218444122133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.503117Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218444122133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.503117Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218399270954", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.732092Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218399270954", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.732092Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218399270954", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.732092Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218399270954", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.732092Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218399270954", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.732092Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218399077475", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.847864Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218399077475", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.847864Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218399077475", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.847864Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218399077475", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.847864Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218399077475", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.847864Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218392354633", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.69967Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218392354633", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.69967Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218392354633", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.69967Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218392354633", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.69967Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218392354633", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.69967Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218385206457", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.530724Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218385206457", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.530724Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218385206457", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.530724Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218385206457", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.530724Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218385206457", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.530724Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218382664009", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.615081Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218382664009", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.615081Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218382664009", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.615081Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218382664009", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.615081Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218382664009", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.615081Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218351487774", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.619542Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218351487774", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.619542Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218351487774", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.619542Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218351487774", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.619542Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218351487774", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.619542Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218326320778", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.475174Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218326320778", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.475174Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218326320778", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.475174Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218326320778", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.475174Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218326320778", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.475174Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218323771676", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.942984Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218323771676", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.942984Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218323771676", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.942984Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218323771676", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.942984Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218323771676", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.942984Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218321623911", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.727831Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218321623911", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.727831Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218321623911", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.727831Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218321623911", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.727831Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218321623911", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.727831Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218284264494", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.629273Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218284264494", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.629273Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218284264494", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.629273Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218284264494", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.629273Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218284264494", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.629273Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218268913069", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.334155Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218268913069", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.334155Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218268913069", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.334155Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218268913069", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.334155Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218268913069", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.334155Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218174889732", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.464405Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218174889732", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.464405Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218174889732", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.464405Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218174889732", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.464405Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218174889732", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.464405Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218156536906", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.959281Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218156536906", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.959281Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218156536906", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.959281Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218156536906", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.959281Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218156536906", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.959281Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218117893153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.983051Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218117893153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.983051Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218117893153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.983051Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218117893153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.983051Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218117893153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.983051Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218068997864", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.822342Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218068997864", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.822342Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218068997864", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.822342Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218068997864", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.822342Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232218068997864", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.822342Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217883423287", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.423624Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217883423287", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.423624Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217883423287", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.423624Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217883423287", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.423624Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217883423287", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.423624Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217859073955", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.934936Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217859073955", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.934936Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217859073955", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.934936Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217859073955", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.934936Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217859073955", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.934936Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217776345449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.895167Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217776345449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.895167Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217776345449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.895167Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217776345449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.895167Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217776345449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.895167Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217768704940", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.446525Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217768704940", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.446525Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217768704940", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.446525Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217768704940", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.446525Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217768704940", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.446525Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217767975697", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.972502Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217767975697", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.972502Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217767975697", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.972502Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217767975697", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.972502Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217767975697", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.972502Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217672805791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.563832Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217672805791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.563832Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217672805791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.563832Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217672805791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.563832Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217672805791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.563832Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217671701148", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.73629Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217671701148", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.73629Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217671701148", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.73629Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217671701148", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.73629Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217671701148", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.73629Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217666473838", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.804381Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217666473838", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.804381Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217666473838", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.804381Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217666473838", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.804381Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217666473838", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.804381Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217655337444", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.967228Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217655337444", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.967228Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217655337444", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.967228Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217655337444", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.967228Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217655337444", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.967228Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217613517320", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.603846Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217613517320", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.603846Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217613517320", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.603846Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217613517320", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.603846Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217613517320", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.603846Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217542772296", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.796471Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217542772296", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.796471Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217542772296", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.796471Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217542772296", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.796471Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217542772296", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.796471Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217452327714", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.671127Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217452327714", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.671127Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217452327714", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.671127Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217452327714", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.671127Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217452327714", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.671127Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217441292861", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.707707Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217441292861", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.707707Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217441292861", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.707707Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217441292861", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.707707Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217441292861", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.707707Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217402081624", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.993999Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217402081624", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.993999Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217402081624", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.993999Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217402081624", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.993999Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217402081624", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.993999Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217401630144", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.569031Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217401630144", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.569031Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217401630144", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.569031Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217401630144", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.569031Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217401630144", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.569031Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217319038439", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.639078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217319038439", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.639078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217319038439", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.639078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217319038439", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.639078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217319038439", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.639078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217304246061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.988359Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217304246061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.988359Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217304246061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.988359Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217304246061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.988359Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217304246061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.988359Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217295143182", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.744808Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217295143182", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.744808Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217295143182", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.744808Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217295143182", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.744808Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217295143182", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.744808Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217286643746", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.271661Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217286643746", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.271661Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217286643746", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.271661Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217286643746", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.271661Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217286643746", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.271661Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217224973710", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.907762Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217224973710", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.907762Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217224973710", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.907762Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217224973710", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.907762Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217224973710", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.907762Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217224063190", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:31.432205Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217224063190", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:31.432205Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217224063190", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:31.432205Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217224063190", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:31.432205Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217224063190", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:31.432205Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217182930652", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.355064Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217182930652", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.355064Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217182930652", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.355064Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217182930652", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.355064Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217182930652", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.355064Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217151593636", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:31.460454Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217151593636", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:31.460454Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217151593636", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:31.460454Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217151593636", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:31.460454Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217151593636", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:31.460454Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217144950248", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.949249Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217144950248", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.949249Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217144950248", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.949249Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217144950248", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.949249Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217144950248", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.949249Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217045245689", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.84021Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217045245689", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.84021Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217045245689", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.84021Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217045245689", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.84021Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232217045245689", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.84021Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216975931090", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.573078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216975931090", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.573078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216975931090", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.573078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216975931090", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.573078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216975931090", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.573078Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216915280332", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.740497Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216915280332", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.740497Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216915280332", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.740497Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216915280332", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.740497Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216915280332", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.740497Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216914049983", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.404684Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216914049983", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.404684Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216914049983", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.404684Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216914049983", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.404684Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216914049983", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.404684Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216890893459", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.540652Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216890893459", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.540652Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216890893459", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.540652Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216890893459", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.540652Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216890893459", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.540652Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216772038452", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.921148Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216772038452", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.921148Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216772038452", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.921148Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216772038452", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.921148Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216772038452", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.921148Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216721543901", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.776752Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216721543901", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.776752Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216721543901", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.776752Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216721543901", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.776752Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216721543901", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.776752Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216658270939", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.634576Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216658270939", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.634576Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216658270939", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.634576Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216658270939", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.634576Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216658270939", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.634576Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216634944171", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.853385Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216634944171", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.853385Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216634944171", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.853385Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216634944171", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.853385Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216634944171", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.853385Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216589145364", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.5245Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216589145364", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.5245Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216589145364", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.5245Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216589145364", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.5245Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216589145364", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.5245Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216566000252", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.916266Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216566000252", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.916266Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216566000252", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.916266Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216566000252", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.916266Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216566000252", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.916266Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216543572449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.865487Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216543572449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.865487Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216543572449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.865487Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216543572449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.865487Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216543572449", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.865487Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216531652950", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.5123Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216531652950", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.5123Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216531652950", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.5123Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216531652950", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.5123Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216531652950", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.5123Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216494129686", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.780824Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216494129686", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.780824Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216494129686", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.780824Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216494129686", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.780824Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216494129686", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.780824Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216429146428", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.717457Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216429146428", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.717457Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216429146428", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.717457Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216429146428", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.717457Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216429146428", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.717457Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216425120269", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.78676Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216425120269", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.78676Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216425120269", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.78676Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216425120269", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.78676Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216425120269", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.78676Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216398803141", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.814383Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216398803141", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.814383Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216398803141", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.814383Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216398803141", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.814383Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216398803141", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.814383Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216355694523", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.451108Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216355694523", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.451108Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216355694523", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.451108Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216355694523", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.451108Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216355694523", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.451108Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216342433033", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.50696Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216342433033", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.50696Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216342433033", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.50696Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216342433033", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.50696Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216342433033", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.50696Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216196805068", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.925547Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216196805068", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.925547Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216196805068", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.925547Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216196805068", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.925547Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216196805068", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.925547Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216174006485", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.381557Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216174006485", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.381557Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216174006485", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.381557Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216174006485", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.381557Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216174006485", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.381557Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216147984819", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.385774Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216147984819", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.385774Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216147984819", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.385774Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216147984819", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.385774Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216147984819", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.385774Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216125836941", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.800462Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216125836941", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.800462Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216125836941", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.800462Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216125836941", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.800462Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216125836941", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.800462Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216120064543", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.398925Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216120064543", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.398925Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216120064543", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.398925Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216120064543", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.398925Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216120064543", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.398925Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216088800147", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.808888Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216088800147", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.808888Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216088800147", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.808888Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216088800147", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.808888Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216088800147", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.808888Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216061834602", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.550074Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216061834602", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.550074Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216061834602", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.550074Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216061834602", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.550074Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216061834602", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.550074Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216041630992", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.900176Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216041630992", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.900176Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216041630992", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.900176Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216041630992", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.900176Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216041630992", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.900176Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216008047295", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.836088Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216008047295", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.836088Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216008047295", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.836088Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216008047295", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.836088Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232216008047295", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.836088Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215993973189", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.87931Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215993973189", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.87931Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215993973189", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.87931Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215993973189", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.87931Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215993973189", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.87931Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215968109499", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.771529Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215968109499", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.771529Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215968109499", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.771529Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215968109499", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.771529Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215968109499", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.771529Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215893519024", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.703852Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215893519024", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.703852Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215893519024", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.703852Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215893519024", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.703852Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215893519024", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.703852Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215819434066", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.679771Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215819434066", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.679771Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215819434066", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.679771Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215819434066", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.679771Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215819434066", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.679771Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215741935807", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.857247Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215741935807", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.857247Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215741935807", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.857247Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215741935807", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.857247Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215741935807", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.857247Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215724661996", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.843718Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215724661996", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.843718Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215724661996", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.843718Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215724661996", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.843718Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215724661996", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.843718Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215716781066", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.790922Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215716781066", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.790922Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215716781066", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.790922Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215716781066", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.790922Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215716781066", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.790922Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215659524762", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.938142Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215659524762", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.938142Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215659524762", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.938142Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215659524762", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.938142Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215659524762", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.938142Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215617502256", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.470631Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215617502256", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.470631Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215617502256", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.470631Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215617502256", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.470631Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215617502256", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.470631Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215592322355", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.440828Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215592322355", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.440828Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215592322355", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.440828Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215592322355", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.440828Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215592322355", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.440828Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215565587847", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.214299Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215565587847", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.214299Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215565587847", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.214299Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215565587847", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.214299Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215565587847", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.214299Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215561424945", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.395333Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215561424945", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.395333Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215561424945", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.395333Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215561424945", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.395333Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215561424945", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.395333Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215447179627", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.817925Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215447179627", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.817925Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215447179627", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.817925Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215447179627", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.817925Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215447179627", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.817925Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215397698153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.667076Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215397698153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.667076Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215397698153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.667076Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215397698153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.667076Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215397698153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.667076Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215347429758", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.931186Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215347429758", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.931186Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215347429758", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.931186Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215347429758", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.931186Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232215347429758", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.931186Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232214766940079", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.722512Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232214766940079", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.722512Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232214766940079", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.722512Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232214766940079", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.722512Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232214766940079", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.722512Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232214147680742", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.41985Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232214147680742", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.41985Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232214147680742", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.41985Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232214147680742", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.41985Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232214147680742", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:31.41985Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213877565319", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.90365Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213877565319", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.90365Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213877565319", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.90365Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213877565319", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.90365Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213877565319", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.90365Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213830381770", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.711957Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213830381770", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.711957Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213830381770", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.711957Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213830381770", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.711957Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213830381770", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.711957Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213620746916", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.675671Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213620746916", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.675671Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213620746916", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.675671Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213620746916", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.675671Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232213620746916", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.675671Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/boot(.*)ro,noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232211148405895", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.68381Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/dev/shm(.*)noexec,nosuid,nodev" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232211148405895", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.68381Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/home(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232211148405895", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.68381Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232211148405895", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.68381Z" }, { "check": { "description": "compliance check for mount settings", "location": "/proc/mounts", "name": "mount settings", "test": { "type": "regex", "value": "/var/tmp(.*)noexec,nodev,nosuid" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232211148405895", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:31.68381Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180886544147", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.361475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180886544147", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.361475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180886544147", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.361475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180886544147", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.361475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180886544147", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.361475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180886544147", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.361475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180866854983", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.262018Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180866854983", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.262018Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180866854983", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.262018Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180866854983", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.262018Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180866854983", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.262018Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180866854983", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.262018Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180790810394", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.212313Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180790810394", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.212313Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180790810394", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.212313Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180790810394", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.212313Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180790810394", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.212313Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180790810394", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.212313Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180764394253", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.904941Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180764394253", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.904941Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180764394253", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.904941Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180764394253", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.904941Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180764394253", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.904941Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180764394253", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.904941Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180741904429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.433591Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180741904429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.433591Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180741904429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.433591Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180741904429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.433591Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180741904429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.433591Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180741904429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.433591Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180688865090", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.397494Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180688865090", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.397494Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180688865090", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.397494Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180688865090", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.397494Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180688865090", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.397494Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180688865090", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.397494Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180592490657", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.993704Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180592490657", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.993704Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180592490657", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.993704Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180592490657", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.993704Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180592490657", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.993704Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180592490657", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.993704Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180519386841", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.116963Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180519386841", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.116963Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180519386841", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.116963Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180519386841", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.116963Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180519386841", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.116963Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180519386841", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.116963Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180501835020", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.332188Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180501835020", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.332188Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180501835020", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.332188Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180501835020", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.332188Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180501835020", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.332188Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180501835020", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.332188Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180406038935", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.921319Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180406038935", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.921319Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180406038935", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.921319Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180406038935", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.921319Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180406038935", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.921319Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180406038935", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.921319Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180402071705", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.5306Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180402071705", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.5306Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180402071705", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.5306Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180402071705", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.5306Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180402071705", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.5306Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180402071705", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.5306Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180371970431", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.529256Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180371970431", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.529256Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180371970431", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.529256Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180371970431", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.529256Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180371970431", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.529256Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180371970431", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.529256Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180366631490", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.097925Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180366631490", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.097925Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180366631490", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.097925Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180366631490", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.097925Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180366631490", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.097925Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180366631490", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.097925Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180328117380", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.690846Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180328117380", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.690846Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180328117380", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.690846Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180328117380", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.690846Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180328117380", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.690846Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180328117380", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.690846Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232180300294929", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:21.838439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232180300294929", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:21.838439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232180300294929", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:21.838439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232180300294929", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:21.838439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232180300294929", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:21.838439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232180300294929", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:21.838439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180127166855", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.599707Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180127166855", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.599707Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180127166855", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.599707Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180127166855", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.599707Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180127166855", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.599707Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180127166855", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.599707Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180070158062", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.021134Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180070158062", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.021134Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180070158062", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.021134Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180070158062", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.021134Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180070158062", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.021134Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232180070158062", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.021134Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179980636611", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.011822Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179980636611", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.011822Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179980636611", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.011822Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179980636611", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.011822Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179980636611", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.011822Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179980636611", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.011822Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179937288831", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.427429Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179937288831", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.427429Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179937288831", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.427429Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179937288831", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.427429Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179937288831", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.427429Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179937288831", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.427429Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179903084965", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.805881Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179903084965", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.805881Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179903084965", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.805881Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179903084965", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.805881Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179903084965", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.805881Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179903084965", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.805881Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179860923133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.439124Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179860923133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.439124Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179860923133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.439124Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179860923133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.439124Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179860923133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.439124Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179860923133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.439124Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179771532514", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.987178Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179771532514", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.987178Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179771532514", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.987178Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179771532514", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.987178Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179771532514", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.987178Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179771532514", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.987178Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179746580441", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.389371Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179746580441", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.389371Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179746580441", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.389371Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179746580441", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.389371Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179746580441", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.389371Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179746580441", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.389371Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179732152635", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.676713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179732152635", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.676713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179732152635", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.676713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179732152635", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.676713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179732152635", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.676713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179732152635", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.676713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179717462654", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.898545Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179717462654", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.898545Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179717462654", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.898545Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179717462654", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.898545Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179717462654", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.898545Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179717462654", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.898545Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179691547544", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.335881Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179691547544", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.335881Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179691547544", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.335881Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179691547544", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.335881Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179691547544", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.335881Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179691547544", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.335881Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179576179376", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.40672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179576179376", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.40672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179576179376", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.40672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179576179376", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.40672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179576179376", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.40672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179576179376", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.40672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179570887791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.648155Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179570887791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.648155Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179570887791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.648155Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179570887791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.648155Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179570887791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.648155Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179570887791", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.648155Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179433632374", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.101804Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179433632374", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.101804Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179433632374", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.101804Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179433632374", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.101804Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179433632374", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.101804Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179433632374", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.101804Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179428367195", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.493251Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179428367195", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.493251Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179428367195", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.493251Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179428367195", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.493251Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179428367195", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.493251Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179428367195", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.493251Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179152683415", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.036798Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179152683415", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.036798Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179152683415", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.036798Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179152683415", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.036798Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179152683415", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.036798Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179152683415", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.036798Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179119373341", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.443356Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179119373341", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.443356Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179119373341", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.443356Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179119373341", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.443356Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179119373341", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.443356Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179119373341", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.443356Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179115414976", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.303818Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179115414976", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.303818Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179115414976", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.303818Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179115414976", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.303818Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179115414976", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.303818Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232179115414976", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.303818Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178979694633", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.584986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178979694633", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.584986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178979694633", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.584986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178979694633", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.584986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178979694633", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.584986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178979694633", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.584986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178961955690", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.738801Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178961955690", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.738801Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178961955690", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.738801Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178961955690", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.738801Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178961955690", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.738801Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178961955690", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.738801Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178924325183", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.219051Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178924325183", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.219051Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178924325183", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.219051Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178924325183", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.219051Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178924325183", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.219051Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178924325183", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.219051Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232178916146453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.272619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232178916146453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.272619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232178916146453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.272619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232178916146453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.272619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232178916146453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.272619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232178916146453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.272619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178745752845", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.419867Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178745752845", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.419867Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178745752845", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.419867Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178745752845", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.419867Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178745752845", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.419867Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178745752845", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.419867Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178725192594", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.750635Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178725192594", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.750635Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178725192594", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.750635Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178725192594", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.750635Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178725192594", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.750635Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178725192594", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.750635Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178642283638", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.257253Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178642283638", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.257253Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178642283638", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.257253Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178642283638", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.257253Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178642283638", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.257253Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178642283638", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.257253Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178625847266", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.202569Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178625847266", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.202569Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178625847266", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.202569Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178625847266", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.202569Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178625847266", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.202569Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178625847266", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.202569Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178600279822", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.398273Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178600279822", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.398273Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178600279822", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.398273Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178600279822", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.398273Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178600279822", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.398273Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178600279822", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.398273Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178500758557", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.050092Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178500758557", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.050092Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178500758557", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.050092Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178500758557", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.050092Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178500758557", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.050092Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178500758557", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.050092Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178410083736", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.561036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178410083736", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.561036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178410083736", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.561036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178410083736", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.561036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178410083736", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.561036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178410083736", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.561036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178298182233", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.307752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178298182233", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.307752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178298182233", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.307752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178298182233", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.307752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178298182233", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.307752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178298182233", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.307752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232178272489201", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:22.883364Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232178272489201", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:22.883364Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232178272489201", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:22.883364Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232178272489201", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:22.883364Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232178272489201", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:22.883364Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232178272489201", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:22.883364Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178241276612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.676097Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178241276612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.676097Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178241276612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.676097Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178241276612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.676097Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178241276612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.676097Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178241276612", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.676097Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178197182745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.092884Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178197182745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.092884Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178197182745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.092884Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178197182745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.092884Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178197182745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.092884Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232178197182745", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.092884Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177996160060", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.786306Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177996160060", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.786306Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177996160060", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.786306Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177996160060", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.786306Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177996160060", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.786306Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177996160060", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.786306Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177715639522", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.776764Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177715639522", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.776764Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177715639522", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.776764Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177715639522", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.776764Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177715639522", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.776764Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177715639522", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.776764Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177679002372", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.040604Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177679002372", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.040604Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177679002372", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.040604Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177679002372", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.040604Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177679002372", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.040604Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177679002372", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.040604Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177665917666", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.187825Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177665917666", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.187825Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177665917666", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.187825Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177665917666", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.187825Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177665917666", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.187825Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177665917666", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.187825Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177654991454", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.910183Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177654991454", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.910183Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177654991454", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.910183Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177654991454", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.910183Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177654991454", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.910183Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177654991454", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.910183Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177562523588", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.792733Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177562523588", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.792733Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177562523588", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.792733Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177562523588", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.792733Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177562523588", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.792733Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177562523588", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.792733Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177498101225", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.971256Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177498101225", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.971256Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177498101225", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.971256Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177498101225", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.971256Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177498101225", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.971256Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177498101225", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.971256Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177427271856", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.495882Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177427271856", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.495882Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177427271856", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.495882Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177427271856", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.495882Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177427271856", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.495882Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177427271856", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.495882Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177409666496", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.828975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177409666496", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.828975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177409666496", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.828975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177409666496", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.828975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177409666496", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.828975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177409666496", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.828975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177371295353", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.787359Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177371295353", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.787359Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177371295353", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.787359Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177371295353", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.787359Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177371295353", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.787359Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177371295353", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.787359Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177235760685", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.031052Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177235760685", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.031052Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177235760685", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.031052Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177235760685", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.031052Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177235760685", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.031052Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177235760685", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.031052Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177156563263", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.47942Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177156563263", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.47942Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177156563263", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.47942Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177156563263", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.47942Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177156563263", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.47942Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177156563263", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.47942Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177060266946", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.427383Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177060266946", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.427383Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177060266946", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.427383Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177060266946", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.427383Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177060266946", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.427383Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177060266946", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.427383Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177059763928", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.656635Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177059763928", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.656635Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177059763928", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.656635Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177059763928", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.656635Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177059763928", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.656635Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177059763928", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.656635Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177026126771", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.821711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177026126771", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.821711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177026126771", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.821711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177026126771", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.821711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177026126771", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.821711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232177026126771", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.821711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176849630890", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.914921Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176849630890", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.914921Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176849630890", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.914921Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176849630890", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.914921Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176849630890", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.914921Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176849630890", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.914921Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176728511382", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.411018Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176728511382", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.411018Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176728511382", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.411018Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176728511382", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.411018Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176728511382", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.411018Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176728511382", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.411018Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176701449840", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.402416Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176701449840", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.402416Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176701449840", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.402416Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176701449840", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.402416Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176701449840", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.402416Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176701449840", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.402416Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176672128824", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.290299Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176671943722", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.892984Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176671943722", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.892984Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176671943722", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.892984Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176671943722", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.892984Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176671943722", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.892984Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176671943722", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.892984Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176629319171", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.61349Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176594582335", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.667958Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176589964653", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.643269Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176587268679", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.193777Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176559190556", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.566836Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176559190556", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.566836Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176559190556", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.566836Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176559190556", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.566836Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176559190556", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.566836Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176559190556", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.566836Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176515299341", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.637835Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176515299341", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.637835Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176515299341", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.637835Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176515299341", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.637835Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176515299341", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.637835Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176515299341", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.637835Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176496305809", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.501682Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176496305809", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.501682Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176496305809", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.501682Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176496305809", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.501682Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176496305809", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.501682Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176496305809", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.501682Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176474145883", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.485598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176474145883", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.485598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176474145883", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.485598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176474145883", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.485598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176474145883", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.485598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176474145883", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.485598Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176464622164", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.548185Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176458864061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.356699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176458864061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.356699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176458864061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.356699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176458864061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.356699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176458864061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.356699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176458864061", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.356699Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176454544083", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.747406Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176441839710", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.478809Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176399359901", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.783592Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176359321341", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.48469Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176257091873", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.837041Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176243403039", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.471087Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176243403039", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.471087Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176243403039", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.471087Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176243403039", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.471087Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176243403039", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.471087Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176243403039", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.471087Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176200311519", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.38495Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176191955394", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.696834Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176191955394", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.696834Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176191955394", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.696834Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176191955394", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.696834Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176191955394", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.696834Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176191955394", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.696834Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176187090506", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.320677Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176137499336", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.026861Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176115486080", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.811893Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176115486080", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.811893Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176115486080", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.811893Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176115486080", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.811893Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176115486080", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.811893Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176115486080", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.811893Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176089354208", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.94593Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176084732022", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.571599Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176081589627", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.800637Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176081589627", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.800637Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176081589627", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.800637Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176081589627", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.800637Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176081589627", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.800637Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232176081589627", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.800637Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175963316453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.669956Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175963316453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.669956Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175963316453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.669956Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175963316453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.669956Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175963316453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.669956Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175963316453", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.669956Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175928019712", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.333157Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175907232030", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.268515Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175813220073", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.595654Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175813220073", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.595654Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175813220073", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.595654Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175813220073", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.595654Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175813220073", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.595654Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175813220073", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.595654Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175772681269", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.951841Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175737455266", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.62829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175737455266", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.62829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175737455266", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.62829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175737455266", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.62829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175737455266", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.62829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175737455266", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.62829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175708911205", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.076269Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175708911205", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.076269Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175708911205", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.076269Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175708911205", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.076269Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175708911205", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.076269Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175708911205", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.076269Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175689386753", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.632772Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175689386753", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.632772Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175689386753", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.632772Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175689386753", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.632772Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175689386753", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.632772Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175689386753", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.632772Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175565166536", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.627558Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175561257429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.276792Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175561257429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.276792Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175561257429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.276792Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175561257429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.276792Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175561257429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.276792Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175561257429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.276792Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175516590907", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.730358Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175516590907", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.730358Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175516590907", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.730358Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175516590907", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.730358Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175516590907", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.730358Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175516590907", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.730358Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175455764948", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.580806Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175435797749", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.435174Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175231494424", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.415704Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175166602521", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.24889Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175153187335", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.551496Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175153187335", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.551496Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175153187335", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.551496Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175153187335", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.551496Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175153187335", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.551496Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175153187335", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.551496Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175148245270", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.447958Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175146700318", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.192535Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175114311320", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.672265Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175114311320", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.672265Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175114311320", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.672265Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175114311320", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.672265Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175114311320", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.672265Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175114311320", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.672265Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175110066294", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.95563Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175110066294", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.95563Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175110066294", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.95563Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175110066294", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.95563Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175110066294", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.95563Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175110066294", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.95563Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175099617186", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.725659Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175099617186", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.725659Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175099617186", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.725659Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175099617186", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.725659Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175099617186", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.725659Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175099617186", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.725659Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175051802186", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.343Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232175041297261", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.473932Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174982961762", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.619403Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174863164153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.196989Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232174859895169", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:21.744868Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174858029997", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.210024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174858029997", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.210024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174858029997", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.210024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174858029997", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.210024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174858029997", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.210024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174858029997", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.210024Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174826035558", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.207757Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174811679438", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.439423Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174811679438", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.439423Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174811679438", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.439423Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174811679438", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.439423Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174811679438", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.439423Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174811679438", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.439423Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174794875439", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.316Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174757597788", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.926513Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174757597788", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.926513Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174757597788", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.926513Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174757597788", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.926513Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174757597788", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.926513Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174757597788", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.926513Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174744280159", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.312565Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174744280159", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.312565Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174744280159", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.312565Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174744280159", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.312565Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174744280159", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.312565Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174744280159", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.312565Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174726979210", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.888387Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174620126606", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.507851Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174620126606", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.507851Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174620126606", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.507851Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174620126606", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.507851Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174620126606", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.507851Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174620126606", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.507851Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174557636600", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.201364Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174557636600", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.201364Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174557636600", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.201364Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174557636600", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.201364Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174557636600", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.201364Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174557636600", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.201364Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174556724090", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.252532Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174471152002", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.899662Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174470267572", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.351725Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174453565148", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.10698Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174453565148", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.10698Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174453565148", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.10698Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174453565148", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.10698Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174453565148", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.10698Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174453565148", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.10698Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174438739185", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.822281Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174434149498", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.622358Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174434149498", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.622358Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174434149498", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.622358Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174434149498", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.622358Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174434149498", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.622358Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174434149498", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.622358Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174412144802", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.512813Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174379703643", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.311805Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174379703643", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.311805Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174379703643", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.311805Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174379703643", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.311805Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174379703643", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.311805Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174379703643", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.311805Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174357942738", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.458038Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174348084558", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.905818Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174330490719", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.111207Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174282016665", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.997643Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174273906138", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.543786Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174244302266", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.081902Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174229316424", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.364973Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174208363017", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.349236Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174208363017", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.349236Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174208363017", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.349236Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174208363017", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.349236Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174208363017", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.349236Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174208363017", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.349236Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174193162257", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.462449Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174193162257", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.462449Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174193162257", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.462449Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174193162257", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.462449Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174193162257", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.462449Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174193162257", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.462449Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174188962706", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.377472Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174102235047", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.5387Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174102235047", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.5387Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174102235047", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.5387Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174102235047", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.5387Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174102235047", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.5387Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174102235047", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.5387Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232174076639180", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:22.368959Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232174076639180", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:22.368959Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232174076639180", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:22.368959Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232174076639180", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:22.368959Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232174076639180", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:22.368959Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232174076639180", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:22.368959Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174035598173", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.75164Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174034115470", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.452956Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174010067420", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.499853Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174010067420", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.499853Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174010067420", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.499853Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174010067420", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.499853Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174010067420", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.499853Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174010067420", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.499853Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232174004143899", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.633493Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173962375508", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.932188Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173928330676", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.087978Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173857391744", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.660455Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173857391744", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.660455Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173857391744", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.660455Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173857391744", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.660455Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173857391744", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.660455Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173857391744", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.660455Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173814528379", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.55582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173814528379", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.55582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173814528379", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.55582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173814528379", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.55582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173814528379", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.55582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173814528379", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.55582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173727242333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.229736Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173727242333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.229736Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173727242333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.229736Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173727242333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.229736Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173727242333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.229736Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173727242333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.229736Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173685152555", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.639477Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173650671071", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.423424Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173650671071", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.423424Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173650671071", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.423424Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173650671071", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.423424Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173650671071", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.423424Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173650671071", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.423424Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173649123128", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.07193Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173647142115", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.794118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173647142115", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.794118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173647142115", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.794118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173647142115", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.794118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173647142115", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.794118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173647142115", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.794118Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173630164325", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.339768Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173601112792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.066564Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173601112792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.066564Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173601112792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.066564Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173601112792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.066564Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173601112792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.066564Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173601112792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.066564Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173580022702", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.843219Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173578908701", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.891244Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173578908701", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.891244Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173578908701", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.891244Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173578908701", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.891244Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173578908701", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.891244Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173578908701", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.891244Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173573417515", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.665294Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173573417515", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.665294Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173573417515", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.665294Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173573417515", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.665294Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173573417515", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.665294Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173573417515", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.665294Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173534396067", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.308581Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173503068378", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.503757Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173462776220", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.214319Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173462776220", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.214319Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173462776220", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.214319Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173462776220", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.214319Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173462776220", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.214319Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173462776220", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.214319Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173367787122", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.77962Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173280110174", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.764816Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173269435580", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.6796Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173223360477", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.295447Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173223360477", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.295447Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173223360477", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.295447Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173223360477", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.295447Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173223360477", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.295447Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173223360477", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.295447Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173208467233", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.285901Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173149491775", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.87765Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173149491775", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.87765Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173149491775", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.87765Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173149491775", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.87765Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173149491775", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.87765Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173149491775", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.87765Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173137150528", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.239056Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173113248151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.431026Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173113248151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.431026Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173113248151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.431026Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173113248151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.431026Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173113248151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.431026Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173113248151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.431026Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173074427170", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.938546Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173074427170", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.938546Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173074427170", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.938546Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173074427170", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.938546Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173074427170", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.938546Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173074427170", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.938546Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173044887739", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.44622Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173025194898", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.34438Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232173008382657", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.061114Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172986875469", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.234862Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172978795357", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.1849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172978795357", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.1849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172978795357", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.1849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172978795357", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.1849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172978795357", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.1849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172978795357", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.1849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172977726053", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.760804Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172977726053", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.760804Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172977726053", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.760804Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172977726053", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.760804Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172977726053", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.760804Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172977726053", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.760804Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172974521792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.420397Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172974521792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.420397Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172974521792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.420397Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172974521792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.420397Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172974521792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.420397Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172974521792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.420397Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232172949451232", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:22.61385Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172943404573", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.60409Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172943404573", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.60409Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172943404573", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.60409Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172943404573", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.60409Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172943404573", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.60409Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172943404573", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.60409Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172903913112", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.393805Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172880236091", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.976967Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172827651108", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.872356Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172813375221", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.594427Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172813375221", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.594427Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172813375221", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.594427Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172813375221", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.594427Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172813375221", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.594427Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172813375221", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.594427Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172808010962", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.475242Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172783320761", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.372762Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232172723997006", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:21.391666Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172574518085", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.046455Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172466188782", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.648602Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172460972706", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.539328Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172450798140", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.376201Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172427710832", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.4667Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172425249219", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.53387Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172425249219", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.53387Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172425249219", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.53387Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/bin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172425249219", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.53387Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/local/sbin -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172425249219", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.53387Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to change system binaries", "test": { "type": "regex", "value": "^-w /usr/sbin -p" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172425249219", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.53387Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172414396205", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.348167Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172334049995", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.773448Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172205641950", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.575544Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172176123514", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.32495Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172126851007", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.755654Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232172109852617", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.197553Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232171788493758", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.008308Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232171785962713", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.003053Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232171785607384", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.661872Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232171692409264", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.01602Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232171671129802", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.543592Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232171478528158", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.548146Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232171171500896", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.87786Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232171103097775", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.815133Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232170736188176", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.830002Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232170565945429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.757295Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232170332750285", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.316789Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232170324924025", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.765865Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232170125421361", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.807563Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232170100993835", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:22.320701Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232169921900399", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.589913Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232169892599869", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.686055Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232169817721480", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.380957Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232169615288437", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.959554Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232169452824198", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.88268Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232169293008416", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.055117Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232169183567401", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.653084Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232169183082584", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.328716Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232168943315123", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.243757Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232168909628526", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:20.974728Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232168882151396", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.798307Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232168878771003", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.407969Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232168842169931", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.489903Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232168802105344", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.770146Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232168729231488", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.605525Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232168728755597", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.844567Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232168507882225", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.966652Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232168451372620", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.642967Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232168433792371", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:21.534769Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232168160327269", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:21.623769Z" }, { "check": { "description": "compliance check for configuration management", "location": "/etc/cron.d/puppetcheck", "name": "check puppetctl run is called", "test": { "type": "regex", "value": "puppetctl run" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232168136780114", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:22.205552Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232136066104582", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.730713Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232136066104582", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.730713Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232136066104582", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.730713Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232136066104582", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.730713Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232136066104582", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.730713Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133643247653", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.132851Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133643247653", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.132851Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133643247653", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.132851Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133643247653", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.132851Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133643247653", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.132851Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133641612271", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.233075Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133641612271", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.233075Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133641612271", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.233075Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133640738883", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.445723Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133640738883", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.445723Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133640738883", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.445723Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133640738883", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.445723Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133640738883", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.445723Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133628128105", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.008547Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133628128105", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.008547Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133628128105", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.008547Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133628128105", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.008547Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133628128105", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.008547Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133607794495", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.455355Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133607794495", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.455355Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133607794495", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.455355Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133607794495", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.455355Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133607794495", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.455355Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133601407497", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.926596Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133601407497", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.926596Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133601407497", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.926596Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133601407497", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.926596Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133601407497", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.926596Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133601139135", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.503738Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133601139135", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.503738Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133601139135", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.503738Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133601139135", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.503738Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133601139135", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.503738Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133588009599", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.622461Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133588009599", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.622461Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133588009599", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.622461Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133571548771", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.408841Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133571548771", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.408841Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133571548771", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.408841Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133571548771", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.408841Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133571548771", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.408841Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133569294098", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.801474Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133569294098", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.801474Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133569294098", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.801474Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133569294098", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.801474Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133569294098", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.801474Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133554731798", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.380035Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133554731798", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.380035Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133554731798", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.380035Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133514944714", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.902989Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133514944714", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.902989Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133514944714", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.902989Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133514944714", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.902989Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133514944714", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.902989Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133494478233", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.907661Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133494478233", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.907661Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133494478233", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.907661Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133494478233", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.907661Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133494478233", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.907661Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133478453253", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.921257Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133478453253", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.921257Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133478453253", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.921257Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133478453253", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.921257Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133478453253", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.921257Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133472579504", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.053182Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133472579504", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.053182Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133472579504", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.053182Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133472579504", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.053182Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133472579504", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.053182Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133458616524", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.757294Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133458616524", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.757294Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133458616524", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.757294Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133441200632", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.160991Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133441200632", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.160991Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133441200632", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.160991Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133441200632", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.160991Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133441200632", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.160991Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133418953551", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.436586Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133418953551", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.436586Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133418953551", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.436586Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133397591345", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.344654Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133397591345", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.344654Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133397591345", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.344654Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133397591345", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.344654Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133397591345", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.344654Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133358918509", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.662008Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133358918509", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.662008Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133358918509", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.662008Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133336620458", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.687081Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133336620458", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.687081Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133336620458", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.687081Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133336620458", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.687081Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133336620458", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.687081Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133333698746", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.151581Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133333698746", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.151581Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133333698746", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.151581Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133333698746", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.151581Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133333698746", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.151581Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133316045358", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.612674Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133316045358", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.612674Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133316045358", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.612674Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133316045358", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.612674Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133316045358", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.612674Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133314653844", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.739795Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133314653844", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.739795Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133314653844", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.739795Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133314653844", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.739795Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133314653844", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.739795Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133295689426", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.911554Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133295689426", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.911554Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133295689426", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.911554Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133295689426", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.911554Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133295689426", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.911554Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133275004187", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.8986Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133275004187", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.8986Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133275004187", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.8986Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133236146734", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.970088Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133236146734", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.970088Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133236146734", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.970088Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133236146734", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.970088Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133236146734", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.970088Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133209122367", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.721395Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133209122367", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.721395Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133209122367", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.721395Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133209122367", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.721395Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133209122367", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.721395Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133195898886", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.242714Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133195898886", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.242714Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133195898886", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.242714Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133185057970", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.783791Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133185057970", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.783791Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133185057970", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.783791Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133185057970", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.783791Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133185057970", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.783791Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133183904646", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.964976Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133183904646", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.964976Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133183904646", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.964976Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133183904646", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.964976Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133183904646", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.964976Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133163234474", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.932842Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133163234474", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.932842Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133163234474", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.932842Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133137592866", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.602485Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133137592866", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.602485Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133137592866", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.602485Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133137592866", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.602485Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133137592866", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.602485Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133125025690", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:10.937505Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133125025690", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:10.937505Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133125025690", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:10.937505Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133125025690", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:10.937505Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133125025690", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:10.937505Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133090146100", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.415252Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133090146100", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.415252Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133090146100", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.415252Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133090146100", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.415252Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133090146100", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.415252Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133076182375", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.707593Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133076182375", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.707593Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133076182375", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.707593Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133076182375", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.707593Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133076182375", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.707593Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133034279289", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.08644Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133034279289", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.08644Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133034279289", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.08644Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133034279289", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.08644Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133034279289", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.08644Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232133022757053", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.182059Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133022757053", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.182059Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133022757053", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.182059Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133022757053", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.182059Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232133022757053", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.182059Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132983478583", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.210774Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132983478583", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.210774Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132983478583", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.210774Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132929857784", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.49454Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132929857784", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.49454Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132929857784", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.49454Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132899026042", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:11.975387Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132899026042", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:11.975387Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132899026042", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:11.975387Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132877358201", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.294038Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132877358201", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.294038Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132877358201", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.294038Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132877358201", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.294038Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132877358201", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.294038Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132877137661", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.252679Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132877137661", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.252679Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132877137661", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.252679Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132877137661", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.252679Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132877137661", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.252679Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132855533347", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.197387Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132855533347", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.197387Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132855533347", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.197387Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132822782900", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.110591Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132822782900", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.110591Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132822782900", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.110591Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132822782900", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.110591Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132822782900", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.110591Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132817593847", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.257876Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132817593847", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.257876Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132817593847", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.257876Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132817593847", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.257876Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132817593847", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.257876Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132804437936", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.547558Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132804437936", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.547558Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132804437936", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.547558Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132804437936", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.547558Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132804437936", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.547558Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132740797378", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.262536Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132740797378", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.262536Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132740797378", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.262536Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132740797378", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.262536Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132740797378", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.262536Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132718398505", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.958573Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132718398505", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.958573Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132718398505", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.958573Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132694508112", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.419725Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132694508112", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.419725Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132694508112", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.419725Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132694508112", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.419725Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132694508112", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.419725Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132673788769", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.635161Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132673788769", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.635161Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132673788769", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.635161Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132673788769", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.635161Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132673788769", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.635161Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132660077859", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.819944Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132660077859", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.819944Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132660077859", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.819944Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132660077859", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.819944Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132660077859", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.819944Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132623832050", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.026538Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132623832050", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.026538Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132623832050", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.026538Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132622072457", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.679251Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132622072457", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.679251Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132622072457", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.679251Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132604025665", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.735463Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132604025665", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.735463Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132604025665", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.735463Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132594854531", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.0806Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132594854531", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.0806Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132594854531", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.0806Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132594854531", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.0806Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132594854531", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.0806Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132577129407", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.06689Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132577129407", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.06689Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132577129407", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.06689Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132577129407", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.06689Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132577129407", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.06689Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132570647204", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.674165Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132570647204", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.674165Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132570647204", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.674165Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132570647204", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.674165Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132570647204", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.674165Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132525830576", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.697651Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132525830576", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.697651Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132525830576", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.697651Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132525830576", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.697651Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132525830576", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.697651Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132517106896", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.513182Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132517106896", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.513182Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132517106896", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.513182Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132517106896", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.513182Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132517106896", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.513182Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132515965930", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.238065Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132515965930", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.238065Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132515965930", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.238065Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132515577621", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.465216Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132515577621", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.465216Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132515577621", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.465216Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132515577621", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.465216Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132515577621", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.465216Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132480917795", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.558443Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132480917795", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.558443Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132480917795", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.558443Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132480917795", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.558443Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132480917795", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.558443Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132441219674", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.811038Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132441219674", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.811038Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132441219674", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.811038Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132386690318", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.940151Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132386690318", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.940151Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132386690318", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.940151Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132336002645", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.284201Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132336002645", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.284201Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132336002645", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.284201Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132336002645", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.284201Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132336002645", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.284201Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132327151087", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.703033Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132327151087", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.703033Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132327151087", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.703033Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132327151087", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.703033Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132327151087", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.703033Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132293570604", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.262857Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132293570604", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.262857Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132293570604", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.262857Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132230855188", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.44087Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132230855188", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.44087Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132230855188", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.44087Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132230855188", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.44087Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132230855188", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.44087Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132214449328", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.693196Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132214449328", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.693196Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132214449328", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.693196Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132214449328", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.693196Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132214449328", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.693196Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132167488437", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.45115Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132167488437", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.45115Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132167488437", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.45115Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132167488437", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.45115Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132167488437", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.45115Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132122570116", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.276193Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132122570116", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.276193Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132122570116", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.276193Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132092321505", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.568437Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132092321505", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.568437Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132092321505", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.568437Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132092321505", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.568437Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132092321505", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.568437Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132069344843", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.003455Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132069344843", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.003455Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132069344843", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.003455Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132069344843", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.003455Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132069344843", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.003455Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232132039664891", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.716925Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132039664891", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.716925Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232132039664891", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.716925Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131991924084", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.995942Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131991924084", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.995942Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131991924084", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.995942Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131967633143", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.293293Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131967633143", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.293293Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131967633143", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.293293Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131960359550", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.246589Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131960359550", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.246589Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131960359550", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.246589Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131945221881", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.062033Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131945221881", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.062033Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131945221881", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.062033Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131945221881", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.062033Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131945221881", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.062033Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131924337407", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.091656Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131924337407", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.091656Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131924337407", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.091656Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131924337407", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.091656Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131924337407", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.091656Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131900573309", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.459601Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131900573309", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.459601Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131900573309", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.459601Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131900573309", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.459601Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131900573309", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.459601Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131829016823", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.507627Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131829016823", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.507627Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131829016823", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.507627Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131800476552", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.044949Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131800476552", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.044949Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131800476552", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.044949Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131800476552", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.044949Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131800476552", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.044949Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131791261944", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.148241Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131791261944", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.148241Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131791261944", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.148241Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131791261944", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.148241Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131791261944", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.148241Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131769981543", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.75309Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131769981543", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.75309Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131769981543", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.75309Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131749277043", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.402179Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131749277043", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.402179Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131749277043", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.402179Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131648402302", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.473922Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131648402302", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.473922Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131648402302", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.473922Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131648402302", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.473922Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131648402302", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.473922Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131615510927", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.021845Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131615510927", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.021845Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131615510927", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.021845Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131615510927", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.021845Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131615510927", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.021845Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131549142693", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.983511Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131549142693", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.983511Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131549142693", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.983511Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131549142693", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.983511Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131549142693", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.983511Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131530678684", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.017738Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131530678684", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.017738Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131530678684", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.017738Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131530678684", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.017738Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131530678684", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.017738Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131499329143", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.338834Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131499329143", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.338834Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131499329143", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.338834Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131461127682", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.943301Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131461127682", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.943301Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131461127682", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.943301Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131461127682", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.943301Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131461127682", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.943301Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131450493766", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.931883Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131450493766", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.931883Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131450493766", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.931883Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131450493766", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.931883Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131450493766", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.931883Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131401971937", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.762251Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131401971937", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.762251Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131401971937", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.762251Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131382141135", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.138027Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131382141135", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.138027Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131382141135", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.138027Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131379713696", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.252024Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131379713696", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.252024Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131379713696", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.252024Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131345574792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.936018Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131345574792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.936018Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131345574792", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.936018Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131279125203", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.206129Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131279125203", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.206129Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131279125203", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.206129Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131279125203", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.206129Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131279125203", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.206129Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131276842033", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:11.771874Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131276842033", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:11.771874Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131276842033", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:11.771874Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131276842033", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:11.771874Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131276842033", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:11.771874Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131261149524", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:12.219843Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131261149524", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:12.219843Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131261149524", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:12.219843Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131261149524", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:12.219843Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131261149524", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:12.219843Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131249629795", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.100347Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131249629795", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.100347Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131249629795", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.100347Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131216112192", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.574038Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131216112192", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.574038Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131216112192", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.574038Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131208180749", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.987822Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131208180749", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.987822Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131208180749", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.987822Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131208180749", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.987822Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131208180749", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.987822Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131187013360", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.991276Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131187013360", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.991276Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131187013360", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.991276Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131187013360", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.991276Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131187013360", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.991276Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131155002684", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.247212Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131155002684", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.247212Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131155002684", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.247212Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131154580437", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.179848Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131154580437", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.179848Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131154580437", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.179848Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131154580437", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.179848Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131154580437", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.179848Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131123167570", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.653869Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131123167570", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.653869Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131123167570", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.653869Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131120889793", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.392676Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131120889793", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.392676Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131120889793", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.392676Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131120889793", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.392676Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131120889793", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.392676Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131094219362", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.859519Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131094219362", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.859519Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131094219362", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.859519Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131094219362", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.859519Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131094219362", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.859519Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131055539583", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.806686Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131055539583", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.806686Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131055539583", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.806686Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131038534011", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.096383Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131038534011", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.096383Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131038534011", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.096383Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131038534011", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.096383Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131038534011", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.096383Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232131008751344", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.023016Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131008751344", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.023016Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131008751344", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.023016Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131008751344", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.023016Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232131008751344", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.023016Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130971960725", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.201516Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130971960725", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.201516Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130971960725", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.201516Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130966013790", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.767294Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130966013790", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.767294Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130966013790", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.767294Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130966013790", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.767294Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130966013790", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.767294Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130934581628", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.563206Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130934581628", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.563206Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130934581628", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.563206Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130897001943", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.229491Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130897001943", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.229491Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130897001943", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.229491Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130845841115", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.257226Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130845841115", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.257226Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130845841115", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.257226Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130845841115", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.257226Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130845841115", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.257226Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130784903398", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.214756Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130784903398", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.214756Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130784903398", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.214756Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130784903398", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.214756Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130784903398", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.214756Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130778560495", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.269243Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130778560495", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.269243Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130778560495", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.269243Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130778560495", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.269243Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130778560495", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.269243Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130694689165", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.220885Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130694689165", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.220885Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130694689165", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.220885Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130694689165", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.220885Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130694689165", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.220885Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130693450676", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.426652Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130693450676", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.426652Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130693450676", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.426652Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130693450676", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.426652Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130693450676", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.426652Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130656408696", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.160599Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130656408696", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.160599Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130656408696", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.160599Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130656408696", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.160599Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130656408696", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.160599Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130635075779", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.62614Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130635075779", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.62614Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130635075779", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.62614Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130635075779", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.62614Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130635075779", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.62614Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130621589133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.485389Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130621589133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.485389Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130621589133", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.485389Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130598758025", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.979366Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130598758025", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.979366Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130598758025", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.979366Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130546727608", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.105036Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130546727608", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.105036Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130546727608", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.105036Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130539015123", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.489154Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130539015123", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.489154Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130539015123", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.489154Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130539015123", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.489154Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130539015123", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.489154Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130520259665", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.398936Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130520259665", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.398936Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130520259665", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.398936Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130502485076", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.324197Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130502485076", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.324197Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130502485076", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.324197Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130502485076", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.324197Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130502485076", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.324197Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130475107572", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.226841Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130475107572", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.226841Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130475107572", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.226841Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130475107572", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.226841Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130475107572", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.226841Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130473497510", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.205789Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130473497510", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.205789Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130473497510", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.205789Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130473497510", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.205789Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130473497510", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.205789Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130446417135", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.8304Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130446417135", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.8304Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130446417135", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.8304Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130446417135", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.8304Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130446417135", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.8304Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130442945476", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.953764Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130442945476", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.953764Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130442945476", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.953764Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130442945476", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.953764Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130442945476", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.953764Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130375528215", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.928453Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130375528215", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.928453Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130375528215", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.928453Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130375528215", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.928453Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130375528215", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.928453Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130357388738", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.155867Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130357388738", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.155867Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130357388738", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.155867Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130357388738", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.155867Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130357388738", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.155867Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130342512208", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.79715Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130342512208", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.79715Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130342512208", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.79715Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130342512208", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.79715Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130342512208", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.79715Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130311267071", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.071973Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130311267071", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.071973Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130311267071", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.071973Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130307279638", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.618041Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130307279638", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.618041Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130307279638", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.618041Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130198412688", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.270407Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130198412688", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.270407Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130198412688", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.270407Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130198412688", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.270407Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130198412688", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.270407Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130193826490", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.175252Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130193826490", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.175252Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130193826490", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.175252Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130193826490", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.175252Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130193826490", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.175252Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130191421872", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.10397Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130191421872", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.10397Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130191421872", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.10397Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130191421872", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.10397Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130191421872", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.10397Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130187781842", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.779718Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130187781842", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.779718Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130187781842", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.779718Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130142195366", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.531508Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130142195366", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.531508Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130142195366", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.531508Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130142195366", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.531508Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130142195366", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.531508Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130139899347", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.197121Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130139899347", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.197121Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130139899347", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.197121Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130134128843", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.215011Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130134128843", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.215011Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130134128843", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.215011Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130134128843", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.215011Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130134128843", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.215011Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130129257555", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.155011Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130129257555", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.155011Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130129257555", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.155011Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130129257555", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.155011Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130129257555", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.155011Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130110662596", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.383524Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130110662596", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.383524Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130110662596", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.383524Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130101645108", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.948639Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130101645108", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.948639Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130101645108", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.948639Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130075710057", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.668803Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130075710057", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.668803Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130075710057", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.668803Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130075710057", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.668803Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130075710057", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.668803Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130058116643", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.607122Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130058116643", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.607122Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130058116643", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.607122Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130058116643", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.607122Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130058116643", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.607122Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130052970617", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.279118Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130052970617", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.279118Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130052970617", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.279118Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130052970617", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.279118Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130052970617", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.279118Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232130005039289", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.95324Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130005039289", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.95324Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130005039289", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.95324Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130005039289", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.95324Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232130005039289", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.95324Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129993739727", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.480242Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129993739727", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.480242Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129993739727", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.480242Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129993739727", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.480242Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129993739727", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.480242Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129990698875", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.091208Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129990698875", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.091208Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129990698875", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.091208Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129937796857", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.284525Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129937796857", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.284525Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129937796857", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.284525Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129937796857", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.284525Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129937796857", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.284525Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129888690725", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.959094Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129888690725", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.959094Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129888690725", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.959094Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129888499340", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.519492Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129888499340", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.519492Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129888499340", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.519492Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129888499340", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.519492Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129888499340", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.519492Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129868871774", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.239341Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129868871774", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.239341Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129868871774", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.239341Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129868871774", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.239341Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129868871774", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.239341Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129854682736", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.19294Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129854682736", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.19294Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129854682736", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.19294Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129854682736", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.19294Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129854682736", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.19294Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129781506219", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.322249Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129781506219", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.322249Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129781506219", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.322249Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129781506219", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.322249Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129781506219", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.322249Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129774620383", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:11.184166Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129774620383", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:11.184166Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129774620383", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:55:11.184166Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129746423782", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.175768Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129746423782", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.175768Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129746423782", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.175768Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129746423782", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.175768Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129746423782", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.175768Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129745613746", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.289191Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129745613746", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.289191Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129745613746", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.289191Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129745613746", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.289191Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129745613746", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.289191Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129709141243", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.387566Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129709141243", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.387566Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129709141243", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.387566Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129709141243", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.387566Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129709141243", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.387566Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129707663215", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.333304Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129707663215", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.333304Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129707663215", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.333304Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129707663215", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.333304Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129707663215", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.333304Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129666967638", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.840513Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129666967638", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.840513Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129666967638", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.840513Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129666967638", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.840513Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129666967638", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.840513Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129666426870", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:11.143276Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129666426870", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:11.143276Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129666426870", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:11.143276Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129666426870", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:11.143276Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129666426870", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:55:11.143276Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129638395974", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.792865Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129638395974", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.792865Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129638395974", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.792865Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129638395974", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.792865Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129638395974", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.792865Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129610647908", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.328423Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129610647908", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.328423Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129610647908", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.328423Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129608311580", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.525585Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129608311580", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.525585Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129608311580", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.525585Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129608311580", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.525585Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129608311580", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.525585Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129601877719", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.845254Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129601877719", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.845254Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129601877719", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.845254Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129591496238", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.30551Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129591496238", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.30551Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129591496238", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.30551Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129591496238", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.30551Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129591496238", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.30551Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129571409553", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.499874Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129571409553", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.499874Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129571409553", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.499874Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129544698452", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.085407Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129544698452", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.085407Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129544698452", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.085407Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129504107588", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.142207Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129504107588", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.142207Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129504107588", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.142207Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129504107588", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.142207Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129504107588", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.142207Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129482422189", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.835973Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129482422189", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.835973Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129482422189", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.835973Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129482422189", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.835973Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129482422189", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.835973Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129470942384", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.187348Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129470942384", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.187348Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129470942384", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.187348Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129470942384", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.187348Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129470942384", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.187348Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129465025401", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.825828Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129465025401", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.825828Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129465025401", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.825828Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/apt/sources.list.d", "name": "list apt repositories", "test": { "type": "regex", "value": "^deb " } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129449769342", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.815334Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.conf", "name": "check that gpgcheck is enabled in default yum conf", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129449769342", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.815334Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list yum repositories", "test": { "type": "regex", "value": "^(baseurl|mirrorlist|metalink)=" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129449769342", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.815334Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "check yum gpgcheck is enabled", "test": { "type": "regex", "value": "^gpgcheck=1$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129449769342", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.815334Z" }, { "check": { "description": "list all yum repositories on redhat hosts", "location": "/etc/yum.repos.d", "name": "list repos that explicitely disable gpgcheck", "test": { "type": "regex", "value": "^gpgcheck=0$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129449769342", "policy": { "level": "medium", "name": "system", "url": "" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.815334Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129426214912", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.20129Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129426214912", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.20129Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129426214912", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.20129Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129375278946", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.124249Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129375278946", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.124249Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129375278946", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.124249Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129372979558", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.035179Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129372979558", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.035179Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129372979558", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.035179Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129332181323", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.233228Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129332181323", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.233228Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129332181323", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.233228Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129304347011", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.075358Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129304347011", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.075358Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129304347011", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.075358Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129110380971", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.537621Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129110380971", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.537621Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129110380971", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.537621Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129090662155", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.135037Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232129090662155", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.135037Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129090662155", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.135037Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129022841778", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.300227Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129022841778", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.300227Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232129022841778", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.300227Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232128981635668", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.139125Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128981635668", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.139125Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128981635668", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.139125Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232128955504077", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.164445Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128955504077", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.164445Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128955504077", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.164445Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232128937885354", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.191664Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128937885354", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.191664Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128937885354", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.191664Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232128796901796", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.170243Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128796901796", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.170243Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128796901796", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.170243Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232128769808564", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.047364Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128769808564", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.047364Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128769808564", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.047364Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232128619659501", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.639336Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128619659501", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.639336Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128619659501", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.639336Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232128374838510", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.131273Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128374838510", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.131273Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128374838510", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.131273Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232128172256346", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.057534Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128172256346", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.057534Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128172256346", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.057534Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232128108780304", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.630565Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128108780304", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.630565Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128108780304", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.630565Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232128025320546", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.030716Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128025320546", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.030716Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232128025320546", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.030716Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127997447502", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.170489Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127997447502", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.170489Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127997447502", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.170489Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127972647374", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.787974Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127972647374", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.787974Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127972647374", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.787974Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127929932946", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.726634Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127929932946", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.726634Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127929932946", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.726634Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127775971862", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.893148Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127775971862", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.893148Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127775971862", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.893148Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127742506429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.850802Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127742506429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.850802Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127742506429", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.850802Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127658631775", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.682829Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127658631775", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.682829Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127658631775", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.682829Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127597663036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.351942Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127597663036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.351942Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127597663036", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.351942Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127587239905", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.095901Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127587239905", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.095901Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127587239905", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.095901Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127580928932", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.310452Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127580928932", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.310452Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127580928932", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.310452Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127492606423", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.033198Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127492606423", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.033198Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127492606423", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.033198Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127419899028", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.051632Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127419899028", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.051632Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127419899028", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.051632Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127322930370", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.118968Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127322930370", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.118968Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127322930370", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.118968Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127215937561", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.999195Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127215937561", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.999195Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127215937561", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.999195Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127203738115", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.043289Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127203738115", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.043289Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127203738115", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.043289Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127150722743", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.038801Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127150722743", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.038801Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127150722743", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.038801Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232127059287629", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.049365Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127059287629", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.049365Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232127059287629", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.049365Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126906735212", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.274169Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126906735212", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.274169Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126906735212", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:12.274169Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126849032782", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.039786Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126849032782", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.039786Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126849032782", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.039786Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126802639447", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.146525Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126802639447", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.146525Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126802639447", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.146525Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126701601885", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.649782Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126701601885", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.649782Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126701601885", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.649782Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126650224620", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.553358Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126650224620", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.553358Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126650224620", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.553358Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126629321712", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.028373Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126629321712", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.028373Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126629321712", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.028373Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126602988977", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.949184Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126602988977", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.949184Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126602988977", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.949184Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126584346891", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.189101Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126584346891", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.189101Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126584346891", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.189101Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126458439721", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.013467Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126458439721", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.013467Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126458439721", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.013467Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126407075768", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.817489Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126407075768", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.817489Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126407075768", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:10.817489Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126294042301", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.915924Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126294042301", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.915924Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126294042301", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.915924Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126282132151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.43142Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126282132151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.43142Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126282132151", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.43142Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126245745333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.657801Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126245745333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.657801Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126245745333", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.657801Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126233971156", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.469801Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126233971156", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.469801Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126233971156", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.469801Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126183167197", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.744002Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126183167197", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.744002Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232126183167197", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.744002Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126036686864", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:11.945073Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126036686864", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:11.945073Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232126036686864", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:55:11.945073Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232125945078153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.114547Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125945078153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.114547Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125945078153", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.114547Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125794357710", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.775922Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232125794357710", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.775922Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125794357710", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:55:11.775922Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125502480322", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.541964Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232125502480322", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.541964Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125502480322", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.541964Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125491035263", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.711973Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125491035263", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.711973Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232125491035263", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.711973Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125460894401", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.644173Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125460894401", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.644173Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232125460894401", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.644173Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232125440557938", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.165619Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125440557938", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.165619Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125440557938", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.165619Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232125435954731", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.889005Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125435954731", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.889005Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125435954731", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.889005Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232125359748622", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.855497Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125359748622", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.855497Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125359748622", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.855497Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232125338100386", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.224453Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125338100386", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.224453Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125338100386", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:12.224453Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "authpriv to remote syslog", "test": { "type": "regex", "value": "^authpriv\\.\\*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232125167772659", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.747797Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "daemon to remote syslog", "test": { "type": "regex", "value": "^daemon\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}." } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125167772659", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.747797Z" }, { "check": { "description": "Verify system sends syslog to syslog servers instead of local", "location": "/etc/syslog.conf", "name": "kern to remote syslog", "test": { "type": "regex", "value": "^kern\\.\\*.*@[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232125167772659", "policy": { "level": "medium", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems#SystemSecurityPolicyStandardforLinuxsystems-Systemlogging" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:55:11.747797Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232082125595780", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.802724Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232082108414804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.746415Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232082014062592", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.051632Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232081910143815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:50.701326Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232081856318588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.902845Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232081670411080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.999809Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232081568945109", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.979353Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232081557710574", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.720124Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232081419654433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.995823Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232081350738695", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:51.040993Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232081005278946", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.99217Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232080861823876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.031146Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232080701943478", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.003853Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232080646552512", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.934179Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232080426886318", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.739114Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232080411294374", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.068933Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232080394206695", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:50.966598Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232080219598635", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.094245Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232080129399727", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:50.892961Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232080127703870", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.573739Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232080014452156", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:51.035841Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232079990099023", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.90734Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232079906714324", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.019228Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232079651785368", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.921018Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232079524897171", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.060086Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232079362642390", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.726156Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232079358393227", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.625007Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232079337303946", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:51.048383Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232079281293491", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:50.550568Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232079240216240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.077769Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232079236044581", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.732065Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232079060654156", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.818303Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232079032089308", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.026938Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232078956281265", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.012655Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232078932037591", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:50.988828Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232078656498515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.791339Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232078633067230", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.784828Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232078405437507", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.665215Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232078188194838", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.683591Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232078174670730", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:50.618895Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232078145999411", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.91104Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232078106395112", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.823743Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232078056446813", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.073611Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077997173631", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.983056Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077815969924", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:50.716229Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077792189852", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.735526Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077727745175", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.590301Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077700034797", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.630849Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077594088453", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.846713Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077590531169", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.915283Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077483948796", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.634278Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077473004118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.806646Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077461167474", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.71156Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077420121938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.573749Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077378737203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:50.69567Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077361607398", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.743203Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077291674911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.007823Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232077054123687", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.614309Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076977273236", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:51.081624Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076884606132", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.832625Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076794915519", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.527738Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076707463091", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.68833Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076694689845", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.779166Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076687013577", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.856213Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076661707266", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.678844Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076466162765", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:50.88855Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232076407019058", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:50.578446Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076404599979", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.583498Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076398258411", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.897801Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076254943363", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.610222Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076164935582", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.593768Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076128501894", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.62279Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232076014888326", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:51.06408Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075975689604", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.593311Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075946977096", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.638601Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075940784815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.597573Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075903148749", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.755947Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075886112866", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.799298Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075700313237", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.022714Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075631215356", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:50.938092Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075623541136", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.536376Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075542603553", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.56907Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075518646787", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.769792Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075420192865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.670525Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075416929742", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.632641Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075367229002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.608514Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075361313501", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.840764Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075111377102", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.53242Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232075056059206", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.750713Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074956647495", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:50.77438Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074937456420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.810708Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074790899875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:50.9754Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074758400197", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.925303Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074757202024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:50.766018Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074697267038", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:40.586691Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074586625666", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.61471Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074559998117", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.860723Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074480273239", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.561607Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074429136597", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.626562Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074355135349", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.761025Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074336685110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.929991Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074327048896", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.814893Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074321757875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.971466Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074295829532", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.601436Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074293173700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:40.578593Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074285806451", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.582631Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074274410121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.674524Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074268400348", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:50.706402Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074078566778", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.015843Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074054379532", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.618743Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232074034544952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.085163Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232073970552481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.606779Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232073968838478", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.828301Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232073946486490", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.056281Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232073908078113", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:50.836065Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232073740521072", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:51.089241Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232073710185264", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.564923Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232073637013030", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.851338Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232073631056048", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:40.642349Z" }, { "check": { "description": "check for the presence of the vulnerability scanning user", "location": "/etc/shadow", "name": "check vulnerability scanning user presence", "test": { "type": "regex", "value": "^infrasec:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232073628056871", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+standard+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:50.692271Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232060671299979", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.331138Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232060671299979", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.331138Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232060671299979", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.331138Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232060517358979", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.274886Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232060517358979", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.274886Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232060517358979", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.274886Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232060495776354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.259267Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232060495776354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.259267Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232060495776354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.259267Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232060150284946", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.213486Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232060150284946", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.213486Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232060150284946", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.213486Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232059986215784", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.171993Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232059986215784", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.171993Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232059986215784", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.171993Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232059790732840", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.254623Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232059790732840", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.254623Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232059790732840", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.254623Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232059288660360", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.29695Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232059288660360", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.29695Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232059288660360", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.29695Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232059128272941", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.262764Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232059128272941", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.262764Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232059128272941", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.262764Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232058835625554", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.204823Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058835625554", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.204823Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058835625554", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.204823Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232058804155242", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.245664Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058804155242", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.245664Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058804155242", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.245664Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058796123206", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.278783Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232058796123206", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.278783Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058796123206", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.278783Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232058788736801", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.287553Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058788736801", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.287553Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058788736801", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.287553Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232058582762995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.250567Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058582762995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.250567Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058582762995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.250567Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232058528462581", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.145708Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058528462581", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.145708Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058528462581", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.145708Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232058231164325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.270351Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058231164325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.270351Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058231164325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.270351Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058192663785", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.316398Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058192663785", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.316398Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232058192663785", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.316398Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058118581387", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.324308Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232058118581387", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.324308Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058118581387", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.324308Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232058072678361", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.339102Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058072678361", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.339102Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058072678361", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.339102Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058002086690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.282675Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232058002086690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.282675Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232058002086690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.282675Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232057594436319", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.301787Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232057594436319", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.301787Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232057594436319", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.301787Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232057479507607", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.307991Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232057479507607", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.307991Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232057479507607", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.307991Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232057455269808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.371181Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232057455269808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.371181Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232057455269808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.371181Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232057156863042", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.164253Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232057156863042", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.164253Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232057156863042", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.164253Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056960384165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.266733Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056960384165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.266733Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056960384165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.266733Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056781112658", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.312368Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056781112658", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.312368Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056781112658", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.312368Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056611114669", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.219342Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056611114669", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.219342Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056611114669", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.219342Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056607750160", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.208897Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056607750160", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.208897Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056607750160", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.208897Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056455244339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.291836Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056455244339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.291836Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056455244339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.291836Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056368035848", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.584808Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056368035848", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.584808Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056368035848", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.584808Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056349627311", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.518378Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056349627311", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.518378Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056349627311", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.518378Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056324869268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.812664Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056324869268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.812664Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056324869268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.812664Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056283540642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.691468Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056283540642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.691468Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056283540642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.691468Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056270108139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.47485Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056270108139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.47485Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056270108139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.47485Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056256565886", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.067785Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056256565886", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.067785Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056256565886", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.067785Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056139028805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.508273Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056139028805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.508273Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056139028805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.508273Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056113561887", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.698206Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056113561887", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.698206Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056113561887", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.698206Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056113409545", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.076704Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056113409545", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.076704Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056113409545", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.076704Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056097263331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.528242Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056097263331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.528242Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056097263331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.528242Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232056009205869", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.160154Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056009205869", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.160154Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232056009205869", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.160154Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055969123088", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.709787Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055969123088", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.709787Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055969123088", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.709787Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055955087984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.087677Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055955087984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.087677Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055955087984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.087677Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055954368645", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.734604Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055954368645", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.734604Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055954368645", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.734604Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055940701909", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.72193Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055940701909", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.72193Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055940701909", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.72193Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055924354130", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.75269Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055924354130", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.75269Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055924354130", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.75269Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055850253798", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.574002Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055850253798", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.574002Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055850253798", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.574002Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055807987075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.955867Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055807987075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.955867Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055807987075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.955867Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055711900291", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.139641Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055711900291", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.139641Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055711900291", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.139641Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055645769733", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.112001Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055645769733", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.112001Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055645769733", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.112001Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055603867242", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.99958Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055603867242", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.99958Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055603867242", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.99958Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055511976073", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.748154Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055511976073", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.748154Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055511976073", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.748154Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055480545111", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.489676Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055480545111", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.489676Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055480545111", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.489676Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055450459889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.74387Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055450459889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.74387Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055450459889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.74387Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055420172929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.603502Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055420172929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.603502Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055420172929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.603502Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055415269149", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.06267Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055415269149", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.06267Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055415269149", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.06267Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055382231764", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.917081Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055382231764", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.917081Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055382231764", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.917081Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055374209615", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.023383Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055374209615", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.023383Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055374209615", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.023383Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055261190896", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.503499Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055261190896", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.503499Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055261190896", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.503499Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055109542034", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:34.035458Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055109542034", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:34.035458Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055109542034", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:34.035458Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055070520714", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.044976Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055070520714", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.044976Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055070520714", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.044976Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055045202039", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.127131Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055045202039", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.127131Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055045202039", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.127131Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232055019130561", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.027341Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055019130561", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.027341Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232055019130561", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.027341Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054995004052", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.092484Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054995004052", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.092484Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054995004052", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.092484Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054936276204", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.793595Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054936276204", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.793595Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054936276204", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.793595Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054884155756", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.826993Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054884155756", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.826993Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054884155756", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.826993Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054868242199", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.523052Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054868242199", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.523052Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054868242199", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.523052Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054840347254", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.784847Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054840347254", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.784847Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054840347254", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.784847Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054840227655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.057869Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054840227655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.057869Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054840227655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.057869Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054820138576", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.817832Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054820138576", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.817832Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054820138576", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.817832Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054780815356", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.96324Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054780815356", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.96324Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054780815356", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.96324Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054772554290", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.107698Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054772554290", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.107698Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054772554290", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.107698Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054768709662", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.039466Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054768709662", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.039466Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054768709662", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.039466Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054760344316", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.053388Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054760344316", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.053388Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054760344316", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.053388Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054700337671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.479488Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054700337671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.479488Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054700337671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.479488Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054571282866", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.8358Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054571282866", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.8358Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054571282866", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.8358Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054543599662", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.116167Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054543599662", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.116167Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054543599662", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.116167Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054502867022", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.617802Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054502867022", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.617802Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054502867022", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.617802Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054418367107", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.09728Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054418367107", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.09728Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054418367107", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.09728Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054380784832", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.149944Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054380784832", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.149944Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054380784832", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:34.149944Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054309088223", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.740036Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054309088223", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.740036Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054309088223", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.740036Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054291381155", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.540902Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054291381155", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.540902Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054291381155", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.540902Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054263174551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.049226Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054263174551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.049226Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054263174551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.049226Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054242104268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.798536Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054242104268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.798536Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054242104268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.798536Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054239651043", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.57934Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054239651043", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.57934Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054239651043", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.57934Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232054174592235", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.154818Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054174592235", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.154818Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232054174592235", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.154818Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053980561064", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.512426Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053980561064", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.512426Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053980561064", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.512426Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053965179951", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.713565Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053965179951", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.713565Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053965179951", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.713565Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053952557316", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.765785Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053952557316", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.765785Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053952557316", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.765785Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053780994746", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.609651Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053780994746", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.609651Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053780994746", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.609651Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053723727306", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.031521Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053723727306", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.031521Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053723727306", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.031521Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053663011124", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:33.728659Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053663011124", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:33.728659Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053663011124", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:33.728659Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053659804747", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.103299Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053659804747", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.103299Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053659804747", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.103299Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053608746863", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.014619Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053608746863", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.014619Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053608746863", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.014619Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053549189286", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.70408Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053549189286", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.70408Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053549189286", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.70408Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053505313343", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.071596Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053505313343", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.071596Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053505313343", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.071596Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053489946202", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.855085Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053489946202", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.855085Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053489946202", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.855085Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053477157032", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.01853Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053477157032", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.01853Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053477157032", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.01853Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053403955777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.968934Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053403955777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.968934Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053403955777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.968934Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053315203330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.761072Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053315203330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.761072Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053315203330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.761072Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053230615869", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:34.004785Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053230615869", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:34.004785Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053230615869", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:34.004785Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053199211915", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.841244Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053199211915", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.841244Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053199211915", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.841244Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053186203952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.597257Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053186203952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.597257Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053186203952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.597257Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053157830483", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.008969Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053157830483", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.008969Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053157830483", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.008969Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053129515872", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.498153Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053129515872", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.498153Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053129515872", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.498153Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053060284740", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.533682Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053060284740", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.533682Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053060284740", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.533682Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232053054292084", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.788759Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053054292084", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.788759Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232053054292084", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.788759Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052940714817", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.756405Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052940714817", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.756405Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052940714817", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.756405Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052739395306", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.848704Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052739395306", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.848704Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052739395306", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.848704Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052598645369", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.973532Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052598645369", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.973532Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052598645369", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.973532Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052544768221", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.686818Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052544768221", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.686818Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052544768221", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.686818Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052503834300", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.779709Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052503834300", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.779709Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052503834300", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.779709Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052468096953", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.590788Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052468096953", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.590788Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052468096953", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.590788Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052466744521", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.822384Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052466744521", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.822384Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052466744521", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.822384Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052462821405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.944685Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052462821405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.944685Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052462821405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.944685Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052456374386", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.948241Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052456374386", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.948241Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052456374386", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.948241Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052383411240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.626113Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052383411240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.626113Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052383411240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.626113Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052366596149", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.446087Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052366596149", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.446087Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052366596149", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.446087Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052319645172", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.484581Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052319645172", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.484581Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052319645172", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.484581Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052259968561", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.80514Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052259968561", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.80514Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052259968561", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:33.80514Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052255045082", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.121434Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052255045082", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.121434Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052255045082", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:34.121434Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password strongly hashed and salted", "test": { "type": "regex", "value": "root:\\$(2a|5|6)\\$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052178996492", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.831556Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password hashed with md5", "test": { "type": "regex", "value": "root:\\$1\\$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232052178996492", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.831556Z" }, { "check": { "description": "verify root password storage method", "location": "/etc/shadow", "name": "root password in cleartext", "test": { "type": "regex", "value": "root:[a-za-z0-9]" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232052178996492", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:33.831556Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034916767373", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.355158Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034916767373", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.355158Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034916767373", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.355158Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034916767373", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.355158Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034916767373", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.355158Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034916767373", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.355158Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034916767373", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.355158Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034916767373", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.355158Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034916767373", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.355158Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034916767373", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.355158Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034916767373", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.355158Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034916767373", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.355158Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034844877161", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.701211Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034844877161", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.701211Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034844877161", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.701211Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034844877161", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.701211Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034844877161", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.701211Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034844877161", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.701211Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034844877161", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.701211Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034844877161", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.701211Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034844877161", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.701211Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034844877161", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.701211Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034844877161", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.701211Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034844877161", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.701211Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034811080636", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.799874Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034811080636", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.799874Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034811080636", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.799874Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034811080636", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.799874Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034811080636", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.799874Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034811080636", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.799874Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034811080636", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.799874Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034811080636", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.799874Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034811080636", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.799874Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034811080636", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.799874Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034811080636", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.799874Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034811080636", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.799874Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034792109499", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.341449Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034792109499", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.341449Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034792109499", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.341449Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034792109499", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.341449Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034792109499", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.341449Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034792109499", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.341449Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034792109499", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.341449Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034792109499", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.341449Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034792109499", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.341449Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034792109499", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.341449Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034792109499", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.341449Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034792109499", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.341449Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034765997399", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.715306Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034765997399", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.715306Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034765997399", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.715306Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034765997399", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.715306Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034765997399", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.715306Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034765997399", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.715306Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034765997399", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.715306Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034765997399", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.715306Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034765997399", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.715306Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034765997399", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.715306Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034765997399", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.715306Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034765997399", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.715306Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034759037236", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.186899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034759037236", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.186899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034759037236", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.186899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034759037236", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.186899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034759037236", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.186899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034759037236", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.186899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034759037236", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.186899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034759037236", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.186899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034759037236", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.186899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034759037236", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.186899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034759037236", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.186899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034759037236", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.186899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034750144268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.913426Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034750144268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.913426Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034750144268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.913426Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034750144268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.913426Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034750144268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.913426Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034750144268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.913426Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034750144268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.913426Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034750144268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.913426Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034750144268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.913426Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034750144268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.913426Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034750144268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.913426Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034750144268", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.913426Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034707930227", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.766727Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034707930227", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.766727Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034707930227", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.766727Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034707930227", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.766727Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034707930227", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.766727Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034707930227", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.766727Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034707930227", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.766727Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034707930227", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.766727Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034707930227", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.766727Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034707930227", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.766727Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034707930227", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.766727Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034707930227", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.766727Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034703745448", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.965024Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034703745448", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.965024Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034703745448", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.965024Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034703745448", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.965024Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034703745448", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.965024Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034703745448", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.965024Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034703745448", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.965024Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034703745448", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.965024Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034703745448", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.965024Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034703745448", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.965024Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034703745448", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.965024Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034703745448", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.965024Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034686436280", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.818143Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034686436280", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.818143Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034686436280", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.818143Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034686436280", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.818143Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034686436280", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.818143Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034686436280", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.818143Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034686436280", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.818143Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034686436280", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.818143Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034686436280", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.818143Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034686436280", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.818143Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034686436280", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.818143Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034686436280", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.818143Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034656301665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.979856Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034656301665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.979856Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034656301665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.979856Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034656301665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.979856Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034656301665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.979856Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034656301665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.979856Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034656301665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.979856Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034656301665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.979856Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034656301665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.979856Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034656301665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.979856Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034656301665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.979856Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034656301665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.979856Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034600942974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.939722Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034600942974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.939722Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034600942974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.939722Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034600942974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.939722Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034600942974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.939722Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034600942974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.939722Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034600942974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.939722Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034600942974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.939722Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034600942974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.939722Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034600942974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.939722Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034600942974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.939722Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034600942974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.939722Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034594934815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.459725Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034594934815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.459725Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034594934815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.459725Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034594934815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.459725Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034594934815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.459725Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034594934815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.459725Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034594934815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.459725Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034594934815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.459725Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034594934815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.459725Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034594934815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.459725Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034594934815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.459725Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034594934815", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.459725Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034579542907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.931148Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034579542907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.931148Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034579542907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.931148Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034579542907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.931148Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034579542907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.931148Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034579542907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.931148Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034579542907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.931148Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034579542907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.931148Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034579542907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.931148Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034579542907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.931148Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034579542907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.931148Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034579542907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.931148Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034576525673", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.449165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034576525673", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.449165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034576525673", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.449165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034576525673", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.449165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034576525673", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.449165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034576525673", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.449165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034576525673", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.449165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034576525673", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.449165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034576525673", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.449165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034576525673", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.449165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034576525673", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.449165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034576525673", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.449165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034523511827", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.242684Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034523511827", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.242684Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034523511827", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.242684Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034523511827", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.242684Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034523511827", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.242684Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034523511827", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.242684Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034523511827", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.242684Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034523511827", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.242684Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034523511827", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.242684Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034523511827", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.242684Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034523511827", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.242684Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034523511827", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.242684Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034488843904", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.690859Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034488843904", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.690859Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034488843904", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.690859Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034488843904", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.690859Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034488843904", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.690859Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034488843904", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.690859Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034488843904", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.690859Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034488843904", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.690859Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034488843904", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.690859Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034488843904", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.690859Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034488843904", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.690859Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034488843904", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.690859Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034471634736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.793647Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034471634736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.793647Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034471634736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.793647Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034471634736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.793647Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034471634736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.793647Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034471634736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.793647Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034471634736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.793647Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034471634736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.793647Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034471634736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.793647Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034471634736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.793647Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034471634736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.793647Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034471634736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.793647Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034465481175", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.472466Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034465481175", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.472466Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034465481175", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.472466Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034465481175", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.472466Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034465481175", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.472466Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034465481175", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.472466Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034465481175", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.472466Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034465481175", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.472466Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034465481175", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.472466Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034465481175", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.472466Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034465481175", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.472466Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034465481175", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.472466Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034415993998", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.576875Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034415993998", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.576875Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034415993998", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.576875Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034415993998", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.576875Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034415993998", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.576875Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034415993998", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.576875Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034415993998", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.576875Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034415993998", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.576875Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034415993998", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.576875Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034415993998", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.576875Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034415993998", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.576875Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034415993998", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.576875Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034347771220", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.260116Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034347771220", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.260116Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034347771220", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.260116Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034347771220", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.260116Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034347771220", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.260116Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034347771220", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.260116Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034347771220", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.260116Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034347771220", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.260116Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034347771220", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.260116Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034347771220", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.260116Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034347771220", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.260116Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034347771220", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.260116Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034300736135", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.864643Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034300736135", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.864643Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034300736135", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.864643Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034300736135", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.864643Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034300736135", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.864643Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034300736135", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.864643Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034300736135", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.864643Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034300736135", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.864643Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034300736135", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.864643Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034300736135", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.864643Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034300736135", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.864643Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034300736135", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.864643Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034256043929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.605093Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034256043929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.605093Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034256043929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.605093Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034256043929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.605093Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034256043929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.605093Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034256043929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.605093Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034256043929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.605093Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034256043929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.605093Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034256043929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.605093Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034256043929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.605093Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034256043929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.605093Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034256043929", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.605093Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034228366543", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.129899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034228366543", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.129899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034228366543", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.129899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034228366543", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.129899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034228366543", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.129899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034228366543", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.129899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034228366543", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.129899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034228366543", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.129899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034228366543", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.129899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034228366543", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.129899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034228366543", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.129899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034228366543", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.129899Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034197526624", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.327456Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034197526624", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.327456Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034197526624", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.327456Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034197526624", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.327456Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034197526624", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.327456Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034197526624", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.327456Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034197526624", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.327456Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034197526624", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.327456Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034197526624", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.327456Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034197526624", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.327456Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034197526624", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.327456Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034197526624", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.327456Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034153245466", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.724787Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034153245466", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.724787Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034153245466", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.724787Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034153245466", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.724787Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034153245466", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.724787Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034153245466", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.724787Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034153245466", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.724787Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034153245466", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.724787Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034153245466", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.724787Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034153245466", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.724787Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034153245466", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.724787Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034153245466", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.724787Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034125915118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:28.365521Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034125915118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:28.365521Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034125915118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:28.365521Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034125915118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:28.365521Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034125915118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:28.365521Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034125915118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:28.365521Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034125915118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:28.365521Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034125915118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:28.365521Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034125915118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:28.365521Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034125915118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:28.365521Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034125915118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:28.365521Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034125915118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:28.365521Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034089422655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.883676Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034089422655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.883676Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034089422655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.883676Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034089422655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.883676Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034089422655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.883676Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034089422655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.883676Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034089422655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.883676Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034089422655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.883676Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034089422655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.883676Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034089422655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.883676Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034089422655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.883676Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034089422655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.883676Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034031756552", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.843063Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034031756552", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.843063Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034031756552", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.843063Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034031756552", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.843063Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034031756552", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.843063Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034031756552", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.843063Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034031756552", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.843063Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034031756552", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.843063Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034031756552", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.843063Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034031756552", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.843063Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034031756552", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.843063Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034031756552", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.843063Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034015909351", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.230537Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034015909351", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.230537Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034015909351", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.230537Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034015909351", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.230537Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034015909351", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.230537Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034015909351", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.230537Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034015909351", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.230537Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034015909351", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.230537Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034015909351", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.230537Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034015909351", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.230537Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034015909351", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.230537Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034015909351", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.230537Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034006958413", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.572553Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034006958413", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.572553Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034006958413", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.572553Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034006958413", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.572553Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034006958413", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.572553Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232034006958413", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.572553Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034006958413", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.572553Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034006958413", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.572553Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034006958413", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.572553Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034006958413", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.572553Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034006958413", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.572553Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232034006958413", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.572553Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033982066095", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.003591Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033982066095", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.003591Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033982066095", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.003591Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033982066095", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.003591Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033982066095", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.003591Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033982066095", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.003591Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033982066095", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.003591Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033982066095", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.003591Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033982066095", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.003591Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033982066095", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.003591Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033982066095", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.003591Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033982066095", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.003591Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033979498611", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.760983Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033979498611", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.760983Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033979498611", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.760983Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033979498611", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.760983Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033979498611", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.760983Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033979498611", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.760983Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033979498611", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.760983Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033979498611", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.760983Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033979498611", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.760983Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033979498611", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.760983Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033979498611", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.760983Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033979498611", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.760983Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033947309862", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.383555Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033947309862", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.383555Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033947309862", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.383555Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033947309862", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.383555Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033947309862", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.383555Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033947309862", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.383555Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033947309862", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.383555Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033947309862", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.383555Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033947309862", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.383555Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033947309862", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.383555Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033947309862", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.383555Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033947309862", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.383555Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033907501529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.212122Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033907501529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.212122Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033907501529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.212122Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033907501529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.212122Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033907501529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.212122Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033907501529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.212122Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033907501529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.212122Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033907501529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.212122Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033907501529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.212122Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033907501529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.212122Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033907501529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.212122Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033907501529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.212122Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033891624856", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.925666Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033891624856", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.925666Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033891624856", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.925666Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033891624856", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.925666Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033891624856", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.925666Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033891624856", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.925666Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033891624856", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.925666Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033891624856", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.925666Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033891624856", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.925666Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033891624856", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.925666Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033891624856", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.925666Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033891624856", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.925666Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033833090559", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:28.654926Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033833090559", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:28.654926Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033833090559", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:28.654926Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033833090559", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:28.654926Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033833090559", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:28.654926Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033833090559", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:28.654926Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033833090559", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:28.654926Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033833090559", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:28.654926Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033833090559", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:28.654926Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033833090559", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:28.654926Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033833090559", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:28.654926Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033833090559", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:28.654926Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033825056100", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.466083Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033825056100", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.466083Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033825056100", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.466083Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033825056100", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.466083Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033825056100", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.466083Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033825056100", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.466083Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033825056100", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.466083Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033825056100", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.466083Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033825056100", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.466083Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033825056100", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.466083Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033825056100", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.466083Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033825056100", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.466083Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779788302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.541651Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779788302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.541651Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779788302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.541651Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779788302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.541651Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779788302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.541651Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779788302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.541651Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779788302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.541651Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779788302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.541651Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779788302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.541651Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779788302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.541651Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779788302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.541651Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779788302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.541651Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779027330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.376782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779027330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.376782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779027330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.376782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779027330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.376782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779027330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.376782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779027330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.376782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779027330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.376782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779027330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.376782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779027330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.376782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779027330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.376782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779027330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.376782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033779027330", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.376782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033748931501", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.849746Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033748931501", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.849746Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033748931501", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.849746Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033748931501", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.849746Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033748931501", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.849746Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033748931501", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.849746Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033748931501", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.849746Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033748931501", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.849746Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033748931501", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.849746Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033748931501", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.849746Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033748931501", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.849746Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033748931501", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.849746Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033610113813", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.730153Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033610113813", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.730153Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033610113813", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.730153Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033610113813", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.730153Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033610113813", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.730153Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033610113813", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.730153Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033610113813", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.730153Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033610113813", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.730153Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033610113813", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.730153Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033610113813", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.730153Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033610113813", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.730153Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033610113813", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.730153Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033559378861", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.642987Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033559378861", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.642987Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033559378861", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.642987Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033559378861", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.642987Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033559378861", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.642987Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033559378861", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.642987Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033559378861", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.642987Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033559378861", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.642987Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033559378861", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.642987Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033559378861", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.642987Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033559378861", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.642987Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033559378861", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.642987Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033552150094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.837732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033552150094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.837732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033552150094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.837732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033552150094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.837732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033552150094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.837732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033552150094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.837732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033552150094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.837732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033552150094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.837732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033552150094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.837732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033552150094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.837732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033552150094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.837732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033552150094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.837732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033551657500", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.500291Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033551657500", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.500291Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033551657500", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.500291Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033551657500", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.500291Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033551657500", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.500291Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033551657500", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.500291Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033551657500", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.500291Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033551657500", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.500291Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033551657500", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.500291Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033551657500", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.500291Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033551657500", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.500291Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033551657500", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.500291Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033509728659", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.811784Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033509728659", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.811784Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033509728659", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.811784Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033509728659", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.811784Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033509728659", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.811784Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033509728659", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.811784Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033509728659", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.811784Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033509728659", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.811784Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033509728659", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.811784Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033509728659", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.811784Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033509728659", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.811784Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033509728659", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.811784Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033405859875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.204931Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033405859875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.204931Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033405859875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.204931Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033405859875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.204931Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033405859875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.204931Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033405859875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.204931Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033405859875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.204931Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033405859875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.204931Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033405859875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.204931Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033405859875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.204931Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033405859875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.204931Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033405859875", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.204931Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033375889241", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.32119Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033375889241", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.32119Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033375889241", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.32119Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033375889241", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.32119Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033375889241", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.32119Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033375889241", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.32119Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033375889241", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.32119Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033375889241", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.32119Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033375889241", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.32119Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033375889241", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.32119Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033375889241", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.32119Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033375889241", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.32119Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033359585222", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.265884Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033359585222", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.265884Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033359585222", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.265884Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033359585222", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.265884Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033359585222", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.265884Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033359585222", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.265884Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033359585222", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.265884Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033359585222", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.265884Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033359585222", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.265884Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033359585222", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.265884Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033359585222", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.265884Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033359585222", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.265884Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033201269937", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.69603Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033201269937", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.69603Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033201269937", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.69603Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033201269937", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.69603Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033201269937", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.69603Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033201269937", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.69603Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033201269937", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.69603Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033201269937", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.69603Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033201269937", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.69603Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033201269937", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.69603Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033201269937", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.69603Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033201269937", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.69603Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033113483284", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.877196Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033113483284", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.877196Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033113483284", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.877196Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033113483284", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.877196Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033113483284", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.877196Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033113483284", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.877196Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033113483284", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.877196Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033113483284", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.877196Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033113483284", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.877196Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033113483284", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.877196Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033113483284", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.877196Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033113483284", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.877196Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033068956108", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.674408Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033068956108", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.674408Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033068956108", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.674408Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033068956108", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.674408Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033068956108", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.674408Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033068956108", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.674408Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033068956108", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.674408Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033068956108", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.674408Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033068956108", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.674408Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033068956108", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.674408Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033068956108", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.674408Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033068956108", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.674408Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033055890528", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.253393Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033055890528", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.253393Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033055890528", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.253393Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033055890528", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.253393Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033055890528", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.253393Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033055890528", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.253393Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033055890528", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.253393Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033055890528", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.253393Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033055890528", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.253393Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033055890528", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.253393Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033055890528", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.253393Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033055890528", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.253393Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033000531460", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.174945Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033000531460", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.174945Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033000531460", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.174945Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033000531460", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.174945Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033000531460", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.174945Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033000531460", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.174945Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033000531460", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.174945Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033000531460", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.174945Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033000531460", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.174945Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033000531460", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.174945Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232033000531460", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.174945Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232033000531460", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.174945Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032948528422", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.870732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032948528422", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.870732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032948528422", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.870732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032948528422", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.870732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032948528422", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.870732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032948528422", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.870732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032948528422", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.870732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032948528422", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.870732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032948528422", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.870732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032948528422", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.870732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032948528422", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.870732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032948528422", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.870732Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032900140047", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.610786Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032900140047", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.610786Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032900140047", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.610786Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032900140047", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.610786Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032900140047", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.610786Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032900140047", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.610786Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032900140047", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.610786Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032900140047", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.610786Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032900140047", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.610786Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032900140047", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.610786Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032900140047", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.610786Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032900140047", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.610786Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032874548246", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.8998Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032874548246", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.8998Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032874548246", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.8998Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032874548246", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.8998Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032874548246", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.8998Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032874548246", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.8998Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032874548246", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.8998Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032874548246", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.8998Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032874548246", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.8998Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032874548246", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.8998Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032874548246", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.8998Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032874548246", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.8998Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032807500026", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.986301Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032807500026", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.986301Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032807500026", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.986301Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032807500026", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.986301Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032807500026", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.986301Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032807500026", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.986301Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032807500026", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.986301Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032807500026", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.986301Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032807500026", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.986301Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032807500026", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.986301Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032807500026", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.986301Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032807500026", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.986301Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032805647494", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.719759Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032805647494", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.719759Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032805647494", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.719759Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032805647494", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.719759Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032805647494", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.719759Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032805647494", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.719759Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032805647494", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.719759Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032805647494", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.719759Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032805647494", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.719759Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032805647494", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.719759Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032805647494", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.719759Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032805647494", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.719759Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032802570995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.421069Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032802570995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.421069Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032802570995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.421069Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032802570995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.421069Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032802570995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.421069Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032802570995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.421069Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032802570995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.421069Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032802570995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.421069Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032802570995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.421069Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032802570995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.421069Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032802570995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.421069Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032802570995", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.421069Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032758496589", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.019027Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032758496589", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.019027Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032758496589", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.019027Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032758496589", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.019027Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032758496589", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.019027Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032758496589", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.019027Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032758496589", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.019027Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032758496589", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.019027Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032758496589", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.019027Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032758496589", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.019027Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032758496589", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.019027Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032758496589", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.019027Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032737631942", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.628062Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032737631942", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.628062Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032737631942", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.628062Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032737631942", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.628062Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032737631942", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.628062Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032737631942", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.628062Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032737631942", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.628062Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032737631942", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.628062Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032737631942", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.628062Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032737631942", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.628062Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032737631942", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.628062Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032737631942", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.628062Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032728692094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.547309Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032728692094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.547309Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032728692094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.547309Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032728692094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.547309Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032728692094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.547309Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032728692094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.547309Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032728692094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.547309Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032728692094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.547309Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032728692094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.547309Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032728692094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.547309Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032728692094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.547309Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032728692094", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.547309Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032637269346", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.919332Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032637269346", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.919332Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032637269346", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.919332Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032637269346", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.919332Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032637269346", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.919332Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032637269346", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.919332Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032637269346", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.919332Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032637269346", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.919332Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032637269346", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.919332Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032637269346", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.919332Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032637269346", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.919332Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032637269346", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.919332Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032520338985", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.969658Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032520338985", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.969658Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032520338985", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.969658Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032520338985", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.969658Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032520338985", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.969658Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032520338985", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.969658Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032520338985", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.969658Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032520338985", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.969658Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032520338985", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.969658Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032520338985", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.969658Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032520338985", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.969658Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032520338985", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.969658Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032503036238", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.283938Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032503036238", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.283938Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032503036238", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.283938Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032503036238", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.283938Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032503036238", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.283938Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032503036238", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.283938Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032503036238", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.283938Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032503036238", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.283938Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032503036238", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.283938Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032503036238", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.283938Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032503036238", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.283938Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032503036238", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.283938Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032463269881", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.78773Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032463269881", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.78773Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032463269881", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.78773Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032463269881", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.78773Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032463269881", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.78773Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032463269881", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.78773Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032463269881", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.78773Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032463269881", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.78773Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032463269881", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.78773Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032463269881", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.78773Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032463269881", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.78773Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032463269881", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.78773Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032436782421", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.433136Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032436782421", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.433136Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032436782421", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.433136Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032436782421", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.433136Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032436782421", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.433136Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032436782421", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.433136Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032436782421", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.433136Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032436782421", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.433136Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032436782421", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.433136Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032436782421", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.433136Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032436782421", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.433136Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032436782421", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.433136Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032356230608", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.855234Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032356230608", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.855234Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032356230608", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.855234Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032356230608", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.855234Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032356230608", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.855234Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032356230608", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.855234Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032356230608", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.855234Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032356230608", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.855234Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032356230608", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.855234Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032356230608", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.855234Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032356230608", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.855234Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032356230608", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.855234Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032267263529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.511025Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032267263529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.511025Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032267263529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.511025Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032267263529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.511025Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032267263529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.511025Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032267263529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.511025Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032267263529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.511025Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032267263529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.511025Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032267263529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.511025Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032267263529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.511025Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032267263529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.511025Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032267263529", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.511025Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032248981783", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.779342Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032248981783", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.779342Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032248981783", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.779342Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032248981783", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.779342Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032248981783", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.779342Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032248981783", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.779342Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032248981783", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.779342Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032248981783", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.779342Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032248981783", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.779342Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032248981783", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.779342Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032248981783", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.779342Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032248981783", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.779342Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032237982671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.334051Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032237982671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.334051Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032237982671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.334051Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032237982671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.334051Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032237982671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.334051Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032237982671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.334051Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032237982671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.334051Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032237982671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.334051Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032237982671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.334051Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032237982671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.334051Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032237982671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.334051Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032237982671", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.334051Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032115643102", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.99749Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032115643102", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.99749Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032115643102", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.99749Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032115643102", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.99749Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032115643102", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.99749Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032115643102", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.99749Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032115643102", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.99749Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032115643102", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.99749Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032115643102", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.99749Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032115643102", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.99749Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032115643102", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.99749Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032115643102", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.99749Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032060209952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.350893Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032060209952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.350893Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032060209952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.350893Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032060209952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.350893Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032060209952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.350893Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032060209952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.350893Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032060209952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.350893Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032060209952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.350893Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032060209952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.350893Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032060209952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.350893Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032060209952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.350893Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032060209952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.350893Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032018904228", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.224972Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032018904228", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.224972Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032018904228", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.224972Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032018904228", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.224972Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032018904228", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.224972Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232032018904228", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.224972Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032018904228", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.224972Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032018904228", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.224972Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032018904228", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.224972Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032018904228", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.224972Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032018904228", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.224972Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232032018904228", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.224972Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031994547583", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.484583Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031994547583", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.484583Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031994547583", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.484583Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031994547583", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.484583Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031994547583", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.484583Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031994547583", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.484583Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031994547583", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.484583Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031994547583", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.484583Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031994547583", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.484583Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031994547583", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.484583Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031994547583", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.484583Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031994547583", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.484583Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031983354760", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.975245Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031983354760", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.975245Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031983354760", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.975245Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031983354760", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.975245Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031983354760", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.975245Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031983354760", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.975245Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031983354760", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.975245Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031983354760", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.975245Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031983354760", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.975245Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031983354760", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.975245Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031983354760", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.975245Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031983354760", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.975245Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031882203165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.824168Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031882203165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.824168Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031882203165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.824168Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031882203165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.824168Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031882203165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.824168Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031882203165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.824168Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031882203165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.824168Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031882203165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.824168Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031882203165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.824168Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031882203165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.824168Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031882203165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.824168Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031882203165", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.824168Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031852002142", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.506443Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031852002142", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.506443Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031852002142", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.506443Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031852002142", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.506443Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031852002142", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.506443Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031852002142", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.506443Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031852002142", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.506443Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031852002142", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.506443Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031852002142", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.506443Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031852002142", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.506443Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031852002142", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.506443Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031852002142", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.506443Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031781148452", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:29.030739Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031781148452", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:29.030739Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031781148452", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:29.030739Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031781148452", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:29.030739Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031781148452", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:29.030739Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031781148452", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:29.030739Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031781148452", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:29.030739Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031781148452", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:29.030739Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031781148452", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:29.030739Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031781148452", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:29.030739Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031781148452", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:29.030739Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031781148452", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:29.030739Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031740443093", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.217846Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031740443093", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.217846Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031740443093", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.217846Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031740443093", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.217846Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031740443093", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.217846Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031740443093", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.217846Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031740443093", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.217846Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031740443093", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.217846Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031740443093", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.217846Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031740443093", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.217846Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031740443093", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.217846Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031740443093", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.217846Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031735127693", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.559755Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031735127693", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.559755Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031735127693", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.559755Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031735127693", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.559755Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031735127693", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.559755Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031735127693", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.559755Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031735127693", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.559755Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031735127693", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.559755Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031735127693", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.559755Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031735127693", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.559755Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031735127693", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.559755Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031735127693", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.559755Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031732080344", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.670244Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031732080344", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.670244Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031732080344", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.670244Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031732080344", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.670244Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031732080344", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.670244Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031732080344", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.670244Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031732080344", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.670244Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031732080344", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.670244Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031732080344", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.670244Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031732080344", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.670244Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031732080344", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.670244Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031732080344", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.670244Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031718457046", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.392242Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031718457046", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.392242Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031718457046", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.392242Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031718457046", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.392242Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031718457046", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.392242Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031718457046", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.392242Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031718457046", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.392242Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031718457046", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.392242Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031718457046", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.392242Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031718457046", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.392242Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031718457046", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.392242Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031718457046", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.392242Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031710750749", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.360668Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031710750749", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.360668Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031710750749", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.360668Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031710750749", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.360668Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031710750749", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.360668Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031710750749", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.360668Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031710750749", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.360668Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031710750749", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.360668Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031710750749", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.360668Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031710750749", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.360668Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031710750749", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.360668Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031710750749", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.360668Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031708859961", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.806113Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031708859961", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.806113Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031708859961", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.806113Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031708859961", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.806113Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031708859961", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.806113Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031708859961", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.806113Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031708859961", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.806113Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031708859961", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.806113Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031708859961", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.806113Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031708859961", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.806113Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031708859961", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.806113Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031708859961", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.806113Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031697330467", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.144744Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031697330467", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.144744Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031697330467", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.144744Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031697330467", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.144744Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031697330467", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.144744Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031697330467", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.144744Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031697330467", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.144744Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031697330467", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.144744Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031697330467", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.144744Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031697330467", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.144744Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031697330467", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.144744Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031697330467", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.144744Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031682092240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.478793Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031682092240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.478793Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031682092240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.478793Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031682092240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.478793Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031682092240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.478793Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031682092240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.478793Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031682092240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.478793Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031682092240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.478793Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031682092240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.478793Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031682092240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.478793Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031682092240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.478793Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031682092240", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.478793Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031640830075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:28.77284Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031640830075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:28.77284Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031640830075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:28.77284Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031640830075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:28.77284Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031640830075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:28.77284Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031640830075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:28.77284Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031640830075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:28.77284Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031640830075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:28.77284Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031640830075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:28.77284Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031640830075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:28.77284Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031640830075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:28.77284Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031640830075", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:28.77284Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031619574839", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.314946Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031619574839", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.314946Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031619574839", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.314946Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031619574839", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.314946Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031619574839", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.314946Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031619574839", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.314946Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031619574839", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.314946Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031619574839", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.314946Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031619574839", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.314946Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031619574839", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.314946Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031619574839", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.314946Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031619574839", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.314946Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031534236331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.859587Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031534236331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.859587Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031534236331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.859587Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031534236331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.859587Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031534236331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.859587Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031534236331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.859587Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031534236331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.859587Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031534236331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.859587Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031534236331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.859587Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031534236331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.859587Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031534236331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.859587Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031534236331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.859587Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031532137099", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.621165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031532137099", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.621165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031532137099", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.621165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031532137099", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.621165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031532137099", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.621165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031532137099", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.621165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031532137099", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.621165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031532137099", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.621165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031532137099", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.621165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031532137099", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.621165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031532137099", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.621165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031532137099", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.621165Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031477958138", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.891824Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031477958138", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.891824Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031477958138", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.891824Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031477958138", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.891824Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031477958138", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.891824Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031477958138", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.891824Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031477958138", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.891824Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031477958138", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.891824Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031477958138", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.891824Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031477958138", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.891824Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031477958138", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.891824Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031477958138", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.891824Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031413571383", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.552797Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031413571383", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.552797Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031413571383", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.552797Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031413571383", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.552797Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031413571383", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.552797Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031413571383", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.552797Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031413571383", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.552797Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031413571383", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.552797Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031413571383", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.552797Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031413571383", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.552797Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031413571383", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.552797Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031413571383", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.552797Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031406188729", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.346348Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031406188729", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.346348Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031406188729", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.346348Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031406188729", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.346348Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031406188729", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.346348Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031406188729", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.346348Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031406188729", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.346348Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031406188729", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.346348Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031406188729", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.346348Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031406188729", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.346348Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031406188729", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.346348Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031406188729", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.346348Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031383851992", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.427944Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031383851992", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.427944Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031383851992", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.427944Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031383851992", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.427944Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031383851992", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.427944Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031383851992", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.427944Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031383851992", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.427944Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031383851992", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.427944Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031383851992", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.427944Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031383851992", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.427944Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031383851992", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.427944Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031383851992", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.427944Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031382069907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.906706Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031382069907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.906706Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031382069907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.906706Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031382069907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.906706Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031382069907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.906706Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031382069907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.906706Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031382069907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.906706Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031382069907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.906706Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031382069907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.906706Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031382069907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.906706Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031382069907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.906706Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031382069907", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.906706Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031370477888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.832259Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031370477888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.832259Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031370477888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.832259Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031370477888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.832259Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031370477888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.832259Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031370477888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.832259Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031370477888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.832259Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031370477888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.832259Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031370477888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.832259Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031370477888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.832259Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031370477888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.832259Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031370477888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.832259Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031367779275", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.274782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031367779275", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.274782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031367779275", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.274782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031367779275", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.274782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031367779275", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.274782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031367779275", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.274782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031367779275", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.274782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031367779275", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.274782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031367779275", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.274782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031367779275", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.274782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031367779275", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.274782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031367779275", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.274782Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031321848845", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.705789Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031321848845", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.705789Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031321848845", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.705789Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031321848845", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.705789Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031321848845", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.705789Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031321848845", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.705789Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031321848845", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.705789Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031321848845", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.705789Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031321848845", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.705789Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031321848845", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.705789Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031321848845", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.705789Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031321848845", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.705789Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031287811197", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.992015Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031287811197", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.992015Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031287811197", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.992015Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031287811197", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.992015Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031287811197", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.992015Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031287811197", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.992015Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031287811197", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.992015Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031287811197", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.992015Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031287811197", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.992015Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031287811197", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.992015Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031287811197", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.992015Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031287811197", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.992015Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031260871922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.371582Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031260871922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.371582Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031260871922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.371582Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031260871922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.371582Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031260871922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.371582Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031260871922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.371582Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031260871922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.371582Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031260871922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.371582Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031260871922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.371582Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031260871922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.371582Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031260871922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.371582Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031260871922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.371582Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031241685968", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.710685Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031241685968", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.710685Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031241685968", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.710685Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031241685968", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.710685Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031241685968", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.710685Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031241685968", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.710685Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031241685968", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.710685Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031241685968", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.710685Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031241685968", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.710685Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031241685968", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.710685Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031241685968", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.710685Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031241685968", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.710685Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031208561655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.686665Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031208561655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.686665Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031208561655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.686665Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031208561655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.686665Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031208561655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.686665Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031208561655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.686665Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031208561655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.686665Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031208561655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.686665Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031208561655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.686665Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031208561655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.686665Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031208561655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.686665Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031208561655", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.686665Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031182352898", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.235448Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031182352898", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.235448Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031182352898", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.235448Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031182352898", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.235448Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031182352898", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.235448Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031182352898", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.235448Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031182352898", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.235448Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031182352898", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.235448Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031182352898", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.235448Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031182352898", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.235448Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031182352898", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.235448Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031182352898", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.235448Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031005204897", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.193664Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031005204897", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.193664Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031005204897", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.193664Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031005204897", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.193664Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031005204897", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.193664Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232031005204897", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.193664Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031005204897", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.193664Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031005204897", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.193664Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031005204897", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.193664Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031005204897", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.193664Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031005204897", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.193664Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232031005204897", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.193664Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030966864118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.443965Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030966864118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.443965Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030966864118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.443965Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030966864118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.443965Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030966864118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.443965Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030966864118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.443965Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030966864118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.443965Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030966864118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.443965Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030966864118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.443965Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030966864118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.443965Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030966864118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.443965Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030966864118", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.443965Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030953175169", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.454679Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030953175169", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.454679Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030953175169", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.454679Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030953175169", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.454679Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030953175169", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.454679Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030953175169", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.454679Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030953175169", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.454679Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030953175169", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.454679Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030953175169", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.454679Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030953175169", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.454679Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030953175169", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.454679Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030953175169", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.454679Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030946229350", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.437723Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030946229350", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.437723Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030946229350", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.437723Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030946229350", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.437723Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030946229350", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.437723Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030946229350", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.437723Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030946229350", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.437723Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030946229350", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.437723Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030946229350", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.437723Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030946229350", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.437723Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030946229350", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.437723Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030946229350", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.437723Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030885037339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.589736Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030885037339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.589736Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030885037339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.589736Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030885037339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.589736Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030885037339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.589736Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030885037339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.589736Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030885037339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.589736Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030885037339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.589736Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030885037339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.589736Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030885037339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.589736Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030885037339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.589736Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030885037339", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.589736Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030866564967", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.039491Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030866564967", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.039491Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030866564967", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.039491Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030866564967", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.039491Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030866564967", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.039491Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030866564967", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.039491Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030866564967", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.039491Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030866564967", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.039491Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030866564967", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.039491Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030866564967", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.039491Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030866564967", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.039491Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030866564967", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:29.039491Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030812423623", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.949432Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030812423623", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.949432Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030812423623", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.949432Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030812423623", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.949432Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030812423623", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.949432Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030812423623", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.949432Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030812423623", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.949432Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030812423623", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.949432Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030812423623", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.949432Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030812423623", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.949432Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030812423623", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.949432Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030812423623", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.949432Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030680180883", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.280144Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030680180883", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.280144Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030680180883", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.280144Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030680180883", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.280144Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030680180883", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.280144Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030680180883", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.280144Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030680180883", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.280144Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030680180883", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.280144Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030680180883", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.280144Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030680180883", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.280144Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030680180883", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.280144Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030680180883", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.280144Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030395699192", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.102995Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030395699192", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.102995Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030395699192", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.102995Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030395699192", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.102995Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030395699192", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.102995Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030395699192", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.102995Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030395699192", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.102995Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030395699192", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.102995Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030395699192", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.102995Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030395699192", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.102995Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030395699192", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.102995Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030395699192", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.102995Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030394585620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.110698Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030394585620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.110698Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030394585620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.110698Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030394585620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.110698Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030394585620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.110698Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030394585620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.110698Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030394585620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.110698Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030394585620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.110698Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030394585620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.110698Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030394585620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.110698Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030394585620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.110698Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030394585620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.110698Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030252517803", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.19806Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030252517803", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.19806Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030252517803", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.19806Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030252517803", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.19806Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030252517803", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.19806Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232030252517803", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.19806Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030252517803", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.19806Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030252517803", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.19806Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030252517803", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.19806Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030252517803", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.19806Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030252517803", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.19806Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232030252517803", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:28.19806Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232028008589354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.138129Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028008589354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.138129Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232028008589354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.138129Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232028008589354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.138129Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232028008589354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.138129Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232028008589354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.138129Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028008589354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.138129Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028008589354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.138129Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028008589354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.138129Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028008589354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.138129Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028008589354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.138129Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028008589354", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.138129Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232028005234341", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.182362Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028005234341", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.182362Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232028005234341", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.182362Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232028005234341", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.182362Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232028005234341", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.182362Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232028005234341", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.182362Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028005234341", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.182362Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028005234341", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.182362Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028005234341", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.182362Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028005234341", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.182362Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028005234341", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.182362Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232028005234341", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.182362Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232027566318978", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.123289Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232027566318978", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.123289Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232027566318978", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.123289Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027566318978", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.123289Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232027566318978", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.123289Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232027566318978", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.123289Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027566318978", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.123289Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027566318978", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.123289Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027566318978", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.123289Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027566318978", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.123289Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027566318978", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.123289Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027566318978", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.123289Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jvehent(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232027535075166", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.115283Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mhenry(.*)" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027535075166", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.115283Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)mpurzynski(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232027535075166", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.115283Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)gdestuynder(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232027535075166", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.115283Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jbryner(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232027535075166", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.115283Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/group", "name": "check opsec users are in wheel group", "test": { "type": "regex", "value": "^wheel:(.*)jstevensen(.*)" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232027535075166", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.115283Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jvehent:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027535075166", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.115283Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mhenry:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027535075166", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.115283Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^mpurzynski:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027535075166", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.115283Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^gdestuynder:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027535075166", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.115283Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jbryner:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027535075166", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.115283Z" }, { "check": { "description": "Check for the presence of the opsec users for incident response", "location": "/etc/shadow", "name": "check opsec users presence", "test": { "type": "regex", "value": "^jstevensen:" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232027535075166", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Standard+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:28.115283Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013454946040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.759242Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013423117314", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.969497Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013412468148", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.935157Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013264221551", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.929957Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013213486889", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.95046Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013155630928", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.709945Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013133654807", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.579107Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232013027370911", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.683307Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012739883515", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.852587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012651596876", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.542585Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012543212259", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.733164Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012502029110", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.606439Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012487235203", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.549849Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012371660382", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.919611Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012330386449", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.55695Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012311646672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.725975Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012132414984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.905521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232012123655417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.715683Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011928193080", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.889036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011889340003", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.833047Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011782976777", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.673869Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011771019619", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.85933Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011763403560", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.626523Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011677196070", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.98327Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011594893357", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.770686Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011550150938", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.975374Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011413979256", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.956582Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011347084884", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.940626Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011343357077", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.569856Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011325912805", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.694996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011072914808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.866827Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011037927224", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.894996Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011027800335", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.740953Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232011022475028", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.515672Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010880729719", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.765167Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010788116686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.619999Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010752623002", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.845795Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010653912570", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.61373Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010605803234", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.509752Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010595984352", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.448524Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010591594661", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.468711Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010583667218", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.666073Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010579300975", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.961669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010492691139", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:24.021239Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010405937988", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.778279Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010350665640", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.877781Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010317380795", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.657465Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232010180683040", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.914008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009975557736", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.872504Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009914296672", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.753669Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009879699642", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.786099Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009776325325", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.794598Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009714613150", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.884233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009608872302", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:23.688665Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009606623405", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.702643Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009508272394", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.522208Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009447816788", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.839008Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009309262564", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.535003Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009299096569", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.747075Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009186801620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:23.479343Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009151802690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.103655Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232009038811520", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.403619Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008933998479", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.140891Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008899721789", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.241457Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008879375526", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.014165Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008813431185", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.366187Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008658637865", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.460475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008424768425", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.195233Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008407110530", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.161705Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008232335952", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.959586Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008208180304", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.412844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008156128078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.432088Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008110334433", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.387737Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008087791506", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.454291Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008076352842", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.223886Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232008070991692", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.315986Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007959209690", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.353181Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007957297686", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.974699Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007931659767", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.930338Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007774735121", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.042199Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007686529984", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.840049Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007643576181", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.860446Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007629636307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.988668Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007547978665", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.133521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007493409245", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.426212Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007450171024", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.035475Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007290448140", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.072354Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007243268534", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.081036Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007105756632", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.272847Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232007066894804", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.170053Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006887053741", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.212501Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006716451620", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.155647Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006705455331", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.853104Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006601325775", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.418521Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006592711053", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.300226Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006553176078", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.832974Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006508704637", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.952639Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006450397481", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.095844Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006396770700", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.793391Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006327051748", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.063292Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006323209588", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.329829Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006291497940", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:22.869326Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006221767502", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.938232Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006162137974", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.345587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006145170824", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.280032Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232006033576753", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.358713Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005988531470", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.809024Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005966270921", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.124007Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005948111417", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:23.054788Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005905296010", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.921905Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005803645420", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.111664Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005756886493", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.380376Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005573208307", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.907308Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005544585021", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.913118Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005346447922", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.817894Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005325633834", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:23.178789Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005261444808", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.996587Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005231037888", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:23.048732Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005148404214", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.759995Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system init binary", "test": { "type": "regex", "value": "^-w /sbin/init -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit personality() syscall bypass", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s personality" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.allow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron config", "test": { "type": "regex", "value": "^-w /etc/cron.deny -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter inittab", "test": { "type": "regex", "value": "^-w /etc/inittab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog config", "test": { "type": "regex", "value": "^-w /etc/syslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab config", "test": { "type": "regex", "value": "^-w /etc/crontab -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to load lkms", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s init_module" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter openssh config", "test": { "type": "regex", "value": "^-w /etc/sshd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam", "test": { "type": "regex", "value": "^-w /etc/pam.d -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter systemd (directory) init", "test": { "type": "regex", "value": "^-w /etc/systemd -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter system v init", "test": { "type": "regex", "value": "^-w /etc/rc.d/init.d/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/group -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/gshadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/passwd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/shadow -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter user management", "test": { "type": "regex", "value": "^-w /etc/sudoers -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit buffer size", "test": { "type": "regex", "value": "^-b 16384$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit execve()", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s execve" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter rsyslog config", "test": { "type": "regex", "value": "^-w /etc/rsyslog.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.d -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.daily -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.hourly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.monthly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter cron (directory) config", "test": { "type": "regex", "value": "^-w /etc/cron.weekly -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /etc/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter pam (directories)", "test": { "type": "regex", "value": "^-w /lib/security -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng config", "test": { "type": "regex", "value": "^-w /etc/syslog-ng.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b32 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to replace kernel via kexec", "test": { "type": "regex", "value": "^-a exit,always -f arch=b64 -s kexec_load" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "audit rate limit", "test": { "type": "regex", "value": "^-r 500$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config (rh systems)", "test": { "type": "regex", "value": "^-w /etc/sysconfig/auditd -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter syslog-ng (dir) config", "test": { "type": "regex", "value": "^-w /etc/rsyslog-ng/ -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b32 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-a always,exit -f arch=b64 -s adjtimex -s settimeofday" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter time", "test": { "type": "regex", "value": "^-w /etc/localtime -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audit/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter audit config", "test": { "type": "regex", "value": "^-w /etc/audisp/ -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter crontab (user) config", "test": { "type": "regex", "value": "^-w /var/spool/cron/root -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka (alternative directory) config", "test": { "type": "regex", "value": "^-w /data/hekad/hekad.toml -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter heka config", "test": { "type": "regex", "value": "^-w -w /data/hekad/hekad.toml -p wa" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "compliance check for auditd", "location": "/etc/audit/audit.rules", "name": "attempts to alter libaudit config", "test": { "type": "regex", "value": "^-w /etc/libaudit.conf -p wa" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019232005049023964", "policy": { "level": "low", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/system+security+policy+guidelines+for+linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:22.800445Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991955788455", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.258459Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991955788455", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.258459Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991955788455", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "aus1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.258459Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991828913743", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.263266Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991828913743", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.263266Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991828913743", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "etherpad1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.263266Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991813902502", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.217037Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991813902502", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.217037Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991813902502", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "snippets1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.217037Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991513722793", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.268045Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991513722793", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.268045Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231991513722793", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web5.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.268045Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991269139855", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.272597Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991269139855", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.272597Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991269139855", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ldapmaster1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.272597Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991164700137", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.918942Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991164700137", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.918942Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231991164700137", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bouncer1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.918942Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231990786340598", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.229306Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231990786340598", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.229306Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231990786340598", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-es3.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.229306Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231990572968808", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.210683Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231990572968808", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.210683Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231990572968808", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bedrock1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.210683Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231990129750264", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.249471Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231990129750264", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.249471Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231990129750264", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web14.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.249471Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989952846535", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.951246Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989952846535", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.951246Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989952846535", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "generic2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.951246Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989753539177", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.281115Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989753539177", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.281115Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989753539177", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-web2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.281115Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989627418112", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.353813Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989627418112", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.353813Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989627418112", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "mozdef1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.353813Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989496674762", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.369045Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989496674762", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.369045Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989496674762", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.369045Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989077898535", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.254069Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989077898535", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.254069Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231989077898535", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "addons3.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.254069Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231988854456864", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.389224Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231988854456864", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.389224Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231988854456864", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-processor1.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.389224Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231988474320046", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.284663Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231988474320046", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.284663Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231988474320046", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web13.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.284663Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231988054516231", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.301468Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231988054516231", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.301468Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231988054516231", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "as-mgr1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.301468Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987723532397", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.34269Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987723532397", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.34269Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987723532397", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-bixie-processor01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.34269Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987707480241", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.711586Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987707480241", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.711586Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987707480241", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro2.dev.dmz.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.711586Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987702004556", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.79196Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987702004556", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.79196Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987702004556", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "addons2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.79196Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987530260384", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.947542Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987530260384", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.947542Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987530260384", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bouncer1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.947542Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987522261725", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.421421Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987522261725", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.421421Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987522261725", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "opsec1.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.421421Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987513261135", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.098266Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987513261135", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.098266Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987513261135", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "git1.stage.dmz.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.098266Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987465781033", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.633903Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987465781033", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.633903Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987465781033", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-es1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.633903Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987424231412", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.242926Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987424231412", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.242926Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231987424231412", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "memcache1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.242926Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987400793023", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.135998Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987400793023", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.135998Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987400793023", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bedrock1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.135998Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987361005806", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.200095Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987361005806", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.200095Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987361005806", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ldap1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.200095Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987143966767", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.690428Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987143966767", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.690428Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987143966767", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-mware2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.690428Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987136296241", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.729569Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987136296241", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.729569Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987136296241", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "etherpad1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.729569Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987109673078", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.349741Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987109673078", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.349741Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231987109673078", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.349741Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986958979527", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.817154Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986958979527", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.817154Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986958979527", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "addons4.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.817154Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986910511706", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.745636Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986910511706", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.745636Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986910511706", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ldapmaster1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.745636Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986870334207", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.035505Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986870334207", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.035505Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986870334207", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "redis1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.035505Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986861292540", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.081224Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986861292540", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.081224Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986861292540", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "captain1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.081224Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986835309776", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.821835Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986835309776", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.821835Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986835309776", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.821835Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986827752501", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.22263Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986827752501", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.22263Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986827752501", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "static1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.22263Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986823268128", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.403323Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986823268128", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.403323Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986823268128", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web12.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.403323Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986798640531", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.911527Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986798640531", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.911527Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986798640531", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-bixie-mware01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.911527Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986773361769", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.195539Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986773361769", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.195539Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986773361769", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "input-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.195539Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986699598623", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.970597Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986699598623", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.970597Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986699598623", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "graphite3.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.970597Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986663006142", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.49971Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986663006142", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.49971Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986663006142", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "addons1.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.49971Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986618410611", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.629306Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986618410611", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.629306Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986618410611", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "input1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.629306Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986521262688", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.612376Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986521262688", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.612376Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986521262688", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-celery1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.612376Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986488776614", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.804408Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986488776614", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.804408Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986488776614", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "geoip2.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.804408Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986466631289", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.811508Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986466631289", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.811508Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986466631289", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ldap2.stage.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.811508Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986398758599", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.976813Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986398758599", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.976813Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986398758599", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-collector2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.976813Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986329641945", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.06172Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986329641945", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.06172Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986329641945", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "svn1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.06172Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986315862960", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:18.698302Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986315862960", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:18.698302Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986315862960", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ip-172-30-2-68", "timestamp": "2014-05-30T14:54:18.698302Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986234784197", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.647923Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986234784197", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.647923Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986234784197", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "redis2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.647923Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986213589599", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.107049Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986213589599", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.107049Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986213589599", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch1.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.107049Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986182829053", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.467426Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986182829053", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.467426Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986182829053", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web9.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.467426Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986121436659", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.775603Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986121436659", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.775603Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986121436659", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "graphite2.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.775603Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986110250780", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.050325Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986110250780", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.050325Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986110250780", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-redis1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.050325Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986064331658", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.959655Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986064331658", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.959655Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986064331658", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "generic-pg1.dev.db.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.959655Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986064268264", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.60594Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986064268264", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.60594Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986064268264", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web8.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.60594Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986059262556", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.430044Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231986059262556", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.430044Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231986059262556", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web15.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.430044Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985963379966", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.904057Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985963379966", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.904057Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231985963379966", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web17.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.904057Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985963029493", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.769567Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985963029493", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.769567Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985963029493", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.769567Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985962420156", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.735302Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985962420156", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.735302Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985962420156", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "developer1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.735302Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985890106842", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.989499Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985890106842", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.989499Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985890106842", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "nagios2.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.989499Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231985875052537", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.917868Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985875052537", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.917868Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231985875052537", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.917868Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985791490177", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.757947Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985791490177", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.757947Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231985791490177", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "memcache2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.757947Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985748212711", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.06906Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985748212711", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.06906Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985748212711", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "captain1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.06906Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231985732044126", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.596755Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985732044126", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.596755Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231985732044126", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web6.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.596755Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985604846824", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.785796Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985604846824", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.785796Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985604846824", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-redis1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.785796Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985547354471", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.753583Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985547354471", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.753583Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231985547354471", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web7.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.753583Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985530266111", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.045544Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985530266111", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.045544Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985530266111", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "scan1.ops.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.045544Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985511403515", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.519407Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985511403515", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.519407Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985511403515", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "input-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.519407Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985505848791", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.797853Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985505848791", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.797853Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985505848791", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorroadm.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.797853Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231985455073655", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.102194Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985455073655", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.102194Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231985455073655", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.102194Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985433098457", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.398646Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231985433098457", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.398646Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985433098457", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web10.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.398646Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985429573934", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.694744Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985429573934", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.694744Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985429573934", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "geoip1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.694744Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985355296309", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.623464Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985355296309", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.623464Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231985355296309", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web3.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.623464Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985349295250", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.087885Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985349295250", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.087885Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985349295250", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "snippets1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.087885Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985275928866", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.84025Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985275928866", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.84025Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985275928866", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "intranet1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.84025Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985244913788", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.699613Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985244913788", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.699613Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985244913788", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "graphite1.dev.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.699613Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985232490936", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.391073Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985232490936", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.391073Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985232490936", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.391073Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231985132776323", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.159098Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985132776323", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.159098Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231985132776323", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "celery1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.159098Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985085321432", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.409583Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985085321432", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.409583Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985085321432", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "bedrock1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.409583Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985056063210", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.075695Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985056063210", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.075695Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985056063210", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-bixie-collector01.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.075695Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985042692395", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.641011Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985042692395", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.641011Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231985042692395", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "zmldap2.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.641011Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984964723779", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.591051Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984964723779", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.591051Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984964723779", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "signer1.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.591051Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231984951779476", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.741505Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984951779476", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.741505Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984951779476", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web4.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.741505Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984915985211", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.855963Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984915985211", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.855963Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984915985211", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-es1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.855963Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984909590860", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.024257Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984909590860", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.024257Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984909590860", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-memcache1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.024257Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984872684683", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.932373Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984872684683", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.932373Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984872684683", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "zmldap1.stage.mail.corp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.932373Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231984795072375", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.130418Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984795072375", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.130418Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231984795072375", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "celery2.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.130418Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984783182404", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:18.030701Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984783182404", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:18.030701Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984783182404", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ip-172-30-2-78", "timestamp": "2014-05-30T14:54:18.030701Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984774302353", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.556485Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984774302353", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.556485Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984774302353", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-collector1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.556485Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984748582330", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.661643Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984748582330", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.661643Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984748582330", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.661643Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984666027477", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.124513Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984666027477", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.124513Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984666027477", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch3.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.124513Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984636423891", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.451733Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984636423891", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.451733Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984636423891", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "elasticsearch2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.451733Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984526718456", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.437692Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984526718456", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.437692Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984526718456", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "startpage1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.437692Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984525765928", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.117588Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984525765928", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.117588Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984525765928", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "nagios1.stage.private.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.117588Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984512448396", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.71817Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984512448396", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.71817Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984512448396", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "confluence1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.71817Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984503512590", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.147596Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984503512590", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.147596Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984503512590", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "opsec1.private.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.147596Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984497575416", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.233465Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984497575416", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.233465Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984497575416", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "geoip1.dev.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.233465Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984493860376", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.482155Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984493860376", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.482155Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984493860376", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "input1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.482155Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231984403310217", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.724368Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984403310217", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.724368Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231984403310217", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web18.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.724368Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984391552107", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.11131Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984391552107", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.11131Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984391552107", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "hulmer-sandbox.stage.metrics.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.11131Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231984370295803", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.238302Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984370295803", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.238302Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231984370295803", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web16.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.238302Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984321265769", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.192144Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984321265769", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.192144Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984321265769", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "startpage1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.192144Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984300509589", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.763805Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984300509589", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.763805Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231984300509589", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "celery2.dev.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.763805Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984233534738", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.205716Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984233534738", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.205716Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984233534738", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-celery1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.205716Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984132003089", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.094335Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984132003089", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.094335Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984132003089", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "datazilla1.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:18.094335Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984038121915", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.41357Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984038121915", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.41357Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231984038121915", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "dxr1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.41357Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983989069283", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.982873Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983989069283", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.982873Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983989069283", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-bixie1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.982873Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983972952949", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.477568Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983972952949", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.477568Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231983972952949", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web11.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.477568Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983952473849", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.780259Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983952473849", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.780259Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983952473849", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "intranet1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.780259Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983950041960", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.461799Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983950041960", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.461799Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983950041960", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-es2.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.461799Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983804160771", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.965227Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983804160771", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.965227Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983804160771", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-processor2.stage.metrics.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.965227Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231983785347022", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.018647Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983785347022", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.018647Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": true, "link": "http://localhost:1664/api/v1/command?commandid=6019231983785347022", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "web19.stage.addons.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.018647Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983712645857", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.152435Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983712645857", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.152435Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983712645857", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support-memcache2.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.152435Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983682766032", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.486496Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983682766032", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.486496Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983682766032", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "mrapp4.stage.webapp.scl3.mozilla.com", "timestamp": "2014-05-30T14:54:17.486496Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983587150310", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.040886Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983587150310", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.040886Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983587150310", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "support1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.040886Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983492166019", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:17.653343Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983492166019", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:17.653343Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983492166019", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "ip-172-30-2-86", "timestamp": "2014-05-30T14:54:17.653343Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983487332153", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.471152Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983487332153", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.471152Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983487332153", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.471152Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983463366928", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.142244Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983463366928", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.142244Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983463366928", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "receipt-sign1.dev.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.142244Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983432744781", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.706019Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983432744781", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.706019Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983432744781", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "socorro-memcache1.stage.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:17.706019Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^AllowTcpForwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983425727745", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.056194Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^PermitTunnel no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983425727745", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.056194Z" }, { "check": { "description": "Compliance check for OpenSSH", "location": "/etc/ssh/sshd_config", "name": "check facilities forwarding is off", "test": { "type": "regex", "value": "(?i)^X11Forwarding no$" } }, "compliance": false, "link": "http://localhost:1664/api/v1/command?commandid=6019231983425727745", "policy": { "level": "high", "name": "system", "url": "https://mana.mozilla.org/wiki/display/SECURITY/System+Security+Policy+Guidelines+for+Linux+systems" }, "target": "aus1.dev.webapp.phx1.mozilla.com", "timestamp": "2014-05-30T14:54:18.056194Z" } ] } ], "href": "http://172.30.2.78:1664/api/v1/search?type=command&threatfamily=compliance&status=done&report=complianceitems&limit=100000&after=2014-05-30T10:50:00-04:00&before=2014-05-30T23:59:59-04:00" }, { "data": [ { "name": "search parameters", "value": { "actionname": "%", "after": "2014-05-30T10:50:00-04:00", "agentname": "%", "before": "2014-05-30T23:59:59-04:00", "limit": 100000, "report": "complianceitems", "status": "done", "threatfamily": "compliance", "type": "command" } } ], "href": "http://172.30.2.78:1664/api/v1/search?type=command&threatfamily=compliance&status=done&report=complianceitems&limit=100000&after=2014-05-30T10:50:00-04:00&before=2014-05-30T23:59:59-04:00" } ], "version": "1.0" } }