<?xml version='1.0' encoding='utf-8'?>
<ocil:ocil xmlns:ocil="http://scap.nist.gov/schema/ocil/2.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xhtml="http://www.w3.org/1999/xhtml">
  <ocil:generator>
    <ocil:product_name>build_shorthand.py from SCAP Security Guide</ocil:product_name>
    <ocil:product_version>ssg: 0.1.82</ocil:product_version>
    <ocil:schema_version>2.0</ocil:schema_version>
    <ocil:timestamp>2026-08-10T21:09:22</ocil:timestamp>
  </ocil:generator>
  <ocil:questionnaires>
    <ocil:questionnaire id="ocil:ssg-installed_OS_is_vendor_supported_ocil:questionnaire:1">
      <ocil:title>The Installed Operating System Is Vendor Supported</ocil:title>
      <ocil:actions>
        <ocil:test_action_ref>ocil:ssg-installed_OS_is_vendor_supported_action:testaction:1</ocil:test_action_ref>
      </ocil:actions>
    </ocil:questionnaire>
    <ocil:questionnaire id="ocil:ssg-ufw_rules_for_open_ports_ocil:questionnaire:1">
      <ocil:title>Ensure ufw Firewall Rules Exist for All Open Ports</ocil:title>
      <ocil:actions>
        <ocil:test_action_ref>ocil:ssg-ufw_rules_for_open_ports_action:testaction:1</ocil:test_action_ref>
      </ocil:actions>
    </ocil:questionnaire>
  </ocil:questionnaires>
  <ocil:test_actions>
    <ocil:boolean_question_test_action id="ocil:ssg-installed_OS_is_vendor_supported_action:testaction:1" question_ref="ocil:ssg-installed_OS_is_vendor_supported_question:question:1">
      <ocil:when_true>
        <ocil:result>PASS</ocil:result>
      </ocil:when_true>
      <ocil:when_false>
        <ocil:result>FAIL</ocil:result>
      </ocil:when_false>
    </ocil:boolean_question_test_action>
    <ocil:boolean_question_test_action id="ocil:ssg-ufw_rules_for_open_ports_action:testaction:1" question_ref="ocil:ssg-ufw_rules_for_open_ports_question:question:1">
      <ocil:when_true>
        <ocil:result>PASS</ocil:result>
      </ocil:when_true>
      <ocil:when_false>
        <ocil:result>FAIL</ocil:result>
      </ocil:when_false>
    </ocil:boolean_question_test_action>
  </ocil:test_actions>
  <ocil:questions>
    <ocil:boolean_question id="ocil:ssg-installed_OS_is_vendor_supported_question:question:1">
      <ocil:question_text>To verify that the installed operating system is supported, run
the following command:

$ grep DISTRIB_DESCRIPTION /etc/lsb-release

Ubuntu 26.04
      Is it the case that the installed operating system is not supported?
      </ocil:question_text>
    </ocil:boolean_question>
    <ocil:boolean_question id="ocil:ssg-ufw_rules_for_open_ports_question:question:1">
      <ocil:question_text>Run the following command to determine open ports:
# ss -tuln
Run the following command to determine firewall rules:
# ufw status verbose
For each port identified in the audit which does not have a firewall
rule, add rule for accepting or denying inbound connections
# ufw allow in /
      Is it the case that open ports are denied connection?
      </ocil:question_text>
    </ocil:boolean_question>
  </ocil:questions>
</ocil:ocil>