{"results":[{"id":"bash-default-shell-rhel9","text":"The default shell in RHEL 9 is /bin/bash. Users access a shell prompt via terminal emulators, virtual consoles (Ctrl+Alt+F1-F6), or SSH.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"bpf-restricted-privileged-default-rhel9","text":"BPF is restricted to privileged users by default in RHEL 9 (`unprivileged_bpf_disabled=2`); values are 0=allowed, 1=disabled, 2=disabled but admin can change.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"chage-password-aging","text":"chage manages password aging: -M (max days), -m (min days), -W (warning), -E (account expiry date), -d 0 (force change). chage -l shows current settings. Defaults in /etc/login.defs.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"chrony-ntp-time-sync","text":"chrony is the default NTP time synchronization client on RHEL 9. Configure NTP servers in /etc/chrony.conf with iburst. Use timedatectl for timezone and NTP control. chronyc sources shows sync status.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"cockpit-default-port-9090","text":"The RHEL 9 web console (Cockpit) listens on port 9090 by default.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"create-edit-text-files-vim","text":"Create and edit text files using vim, the default editor on RHEL 9. Use i to insert, Esc to return to normal mode, :wq to save and quit. Also use touch to create empty files and cat > file for quick creation.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"database-default-ports","text":"Default database ports on RHEL 9: MariaDB/MySQL use port 3306, PostgreSQL uses port 5432.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"grubby-set-default-changes-boot-kernel","text":"`grubby --set-default` is the command to change the default boot kernel on RHEL 9.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"inst-graphical-is-default-mode","text":"`inst.graphical` is the default Anaconda installation mode; `inst.text` forces text mode, `inst.cmdline` forces non-interactive mode (requires Kickstart).","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"inst-repo-nfs-defaults-to-nfsv3","text":"`inst.repo=nfs` uses NFSv3 by default; use `nfsvers=X` to specify a different NFS version.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"inst-sshd-enables-ssh-during-install","text":"`inst.sshd` enables SSH access during installation; on IBM Z it is auto-started by default; root has no password unless set via `sshpw` Kickstart command.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"installer-defaults-dhcp","text":"The RHEL installer defaults to DHCP for network configuration; the `ip=` boot option overrides this.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"io-uring-disabled-by-default-rhel9","text":"io_uring is disabled by default in RHEL 9 via `kernel.io_uring_disabled=2`; values are 0=all users, 1=privileged only, 2=disabled for all.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"kickstart-default-completion-halt","text":"The default Kickstart completion method is `halt` (equivalent to `shutdown -H`) if no completion command is specified.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"kickstart-logging-tcp-only-port-514","text":"Kickstart `logging` command for remote syslog uses TCP only, with default port 514.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"mcs-not-default-for-regular-users-targeted","text":"In the `targeted` SELinux policy, MCS is not configured for regular users by default — a CIL module with `(typeattributeset mcs_constrained_type (user_t))` must be installed via `semodule -i`.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"multipathd-flush-on-last-del-values","text":"The `multipathd` `flush_on_last_del` parameter accepts values: `always`/`yes`, `unused`/`no` (default), and `never`.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"polyinstantiation-default-directories","text":"Polyinstantiated directories in SELinux isolate /tmp, /var/tmp, and home directories per-user, preventing race condition attacks and information leaks. Instance directories (/tmp-inst/, /var/tmp/tmp-inst/) hold per-user subdirectories that get bind-mounted over the shared paths.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel9-ad-integration-stack","text":"RHEL 9 provides a complete AD integration stack: realmd orchestrates domain join, SSSD serves as default authentication backend, with a defined set of required packages.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel9-aide-config-and-db-paths","text":"AIDE configuration is at `/etc/aide.conf` and the default database location is `/var/lib/aide/aide.db.gz`.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null}],"count":93,"limit":20,"offset":0}