{"results":[{"id":"amd-sev-requires-epyc-rome","text":"AMD SEV/SEV-ES requires 2nd-generation AMD EPYC (Rome) or later; RHEL 9 provides memory encryption but not security attestation.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"anaconda-ks-cfg-saved-after-install","text":"After every interactive RHEL installation, a reference Kickstart file is saved at `/root/anaconda-ks.cfg`.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"ansible-freeipa-idm-automation-package","text":"`ansible-freeipa` is the official Red Hat package for Ansible-based IdM automation on RHEL 9, providing roles (ipaserver, ipareplica, ipaclient) for installation and modules (ipauser, ipagroup, ipahost) for object management.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"audit-immutable-mode-flag","text":"Audit immutable mode (`-e 2`) with `augenrules` returns exit code 0 in RHEL 9.5, allowing `auditd` to start at boot.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"authselect-replaces-authconfig","text":"`authselect` is the current tool for configuring authentication profiles (PAM/NSS) on RHEL 9, replacing the deprecated `authconfig`.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"bash-default-shell-rhel9","text":"The default shell in RHEL 9 is /bin/bash. Users access a shell prompt via terminal emulators, virtual consoles (Ctrl+Alt+F1-F6), or SSH.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"bpf-jit-always-on-rhel9","text":"BPF JIT compilation is always enabled in RHEL 9 (`CONFIG_BPF_JIT_ALWAYS_ON=y`); BPF programs are compiled to native code, not interpreted.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"bpf-restricted-privileged-default-rhel9","text":"BPF is restricted to privileged users by default in RHEL 9 (`unprivileged_bpf_disabled=2`); values are 0=allowed, 1=disabled, 2=disabled but admin can change.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"bpftool-feature-command","text":"`bpftool feature` enumerates all BPF features (program types, map types, helpers, kernel config) supported by the running RHEL kernel.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"chrony-ntp-time-sync","text":"chrony is the default NTP time synchronization client on RHEL 9. Configure NTP servers in /etc/chrony.conf with iburst. Use timedatectl for timezone and NTP control. chronyc sources shows sync status.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"cockpit-default-port-9090","text":"The RHEL 9 web console (Cockpit) listens on port 9090 by default.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"content-sources-cdn-or-satellite","text":"Registered RHEL systems receive content from either Red Hat Content Delivery Network (CDN) or Red Hat Satellite Server.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"create-edit-text-files-vim","text":"Create and edit text files using vim, the default editor on RHEL 9. Use i to insert, Esc to return to normal mode, :wq to save and quit. Also use touch to create empty files and cat > file for quick creation.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"database-default-ports","text":"Default database ports on RHEL 9: MariaDB/MySQL use port 3306, PostgreSQL uses port 5432.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"database-packages-appstream","text":"Database server packages on RHEL 9 come from the AppStream repository using module streams for version selection.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"database-packages-from-appstream","text":"Database server packages on RHEL 9 are provided from the AppStream repository using module streams for version selection.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"dax-persistent-memory-mount-option","text":"DAX (direct persistent memory mapping) for ext4/XFS requires NVDIMMs and the `dax` mount option (e.g., `mount -o dax /dev/pmem0 /mnt/dax`); it is a Technology Preview in RHEL 9.2.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"deprecated-not-removed","text":"Deprecated functionality in RHEL remains functional in the current major version but is planned for removal in a future major release; it should not be relied upon for new deployments.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"dist-macro-appends-distribution-tag","text":"The `%{?dist}` macro in spec files automatically appends the distribution tag (e.g., `.el9` for RHEL 9).","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"efibootmgr-manages-uefi-boot-order","text":"`efibootmgr` is used to view and modify the UEFI boot order on RHEL 9 systems.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null}],"count":449,"limit":20,"offset":0}