{"results":[{"id":"rhel94-appstream-versions","text":"RHEL 9.4 Application Streams include Python 3.12, Ruby 3.3, PHP 8.2, nginx 1.24, MariaDB 10.11, and PostgreSQL 16.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-chronyd-restricted-service","text":"The `chronyd-restricted` service runs chrony without root privileges for minimal client-only NTP configurations.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-cni-deprecated-netavark-default","text":"The CNI network stack for Podman containers is deprecated in RHEL 9.4 in favor of Netavark; CNI will be removed in a future release.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-fips-edge-provisioning-only","text":"FIPS mode for RHEL for Edge images must be enabled during image provisioning and cannot be changed after the build starts.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-image-builder-partitioning-modes","text":"RHEL Image Builder supports custom mount points and partitioning modes: `auto-lvm`, `lvm`, and `raw`.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-kernel-version","text":"RHEL 9.4 ships with kernel version 5.14.0-427.13.1.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-kvm-64bit-arm-fully-supported","text":"KVM virtualization on 64-bit ARM (aarch64) is fully supported in RHEL 9.4 (promoted from tech preview).","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-modernized-podman-ecosystem","text":"RHEL 9.4 modernizes the Podman container ecosystem across three infrastructure layers: SQLite replaces BoltDB as the default database backend, Netavark replaces CNI for container networking, and Quadlet gains .build, .pod, and .image unit types for declarative systemd-native container management.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-nft-reset-command","text":"The `nft reset` command can reset stateful objects (counters, quotas) in nftables rules.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-nmstatectl-gr-revert","text":"`nmstatectl gr new.yml > revert.yml` generates a revert configuration file before applying network changes.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-openssh-sysusers-d","text":"OpenSSH in RHEL 9.4 uses `sysusers.d` format for system user/group creation, replacing static `useradd` scripts.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-openssl-dropin-directory","text":"OpenSSL provider configurations can be placed in `/etc/pki/tls/openssl.d/*.conf` as a drop-in directory without modifying the main config file.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-podman-farm-build-multiarch","text":"Podman 4.9 in RHEL 9.4 supports `podman farm build` for building multi-architecture container images (Tech Preview).","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-podman-quadlet-new-units","text":"Podman Quadlet in RHEL 9.4 supports `.build`, `.pod`, and `.image` unit types in addition to existing container units.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-podman-sqlite-default-boltdb-deprecated","text":"In RHEL 9.4, SQLite is the fully supported default database backend for Podman; BoltDB is deprecated.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-selinux-userspace-36-deny-rules","text":"SELinux userspace 3.6 in RHEL 9.4 introduces deny rules, allowing policies to explicitly deny access (not just allow/don't-allow).","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-semanage-fcontext-lc-order","text":"`semanage fcontext -l -C` now lists local file context modifications in correct order (oldest to newest), matching `restorecon` processing order.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-sssd-fido2-passwordless","text":"SSSD in RHEL 9.4 supports passwordless authentication via FIDO2-compatible devices (e.g., YubiKey).","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-upgrade-path-810-to-94","text":"RHEL supports in-place upgrade from RHEL 8.10 to RHEL 9.4; direct upgrade from RHEL 7 to RHEL 9 is not supported (requires two-stage upgrade via RHEL 8).","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null},{"id":"rhel94-vm-external-snapshots-default","text":"VM external snapshots are fully supported in RHEL 9.4 and are the default snapshot mechanism.","truth_value":"IN","justification_count":0,"dependent_count":0,"challenges":[],"last_reviewed":null,"review_result":null}],"count":20,"limit":20,"offset":0}