<?xml version="1.0" encoding='UTF-8'?>
<Rules>
    <RuleGroup id="ID0" oid="-1y2p0ij32e8cn:-1y2p0ij32bedh" class="rulegroup" name="IET Solaris daily common v1.1">
        <Description>IET rules common to all Solaris versions</Description>
        <Children>
            <Child refid="ID1" />
            <Child refid="ID2" />
            <Child refid="ID3" />
            <Child refid="ID4" />
            <Child refid="ID5" />
            <Child refid="ID6" />
            <Child refid="ID7" />
            <Child refid="ID8" />
            <Child refid="ID9" />
            <Child refid="ID10" />
            <Child refid="ID11" />
            <Child refid="ID12" />
            <Child refid="ID13" />
        </Children>
    </RuleGroup>
    <PosixFileRule id="ID1" oid="-1y2p0ij32e84y:-1y2p0ij32e812" class="rule" name="Solaris - System Binaries">
        <Description></Description>
        <Severity>0</Severity>
        <Actions />
        <StartPoints>
            <Start>
                <Target>/bin</Target>
                <Severity>10000</Severity>
                <RecurseLevel>-1</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/bin</Target>
                <Severity>10000</Severity>
                <RecurseLevel>-1</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/local/bin</Target>
                <Severity>10000</Severity>
                <RecurseLevel>-1</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/openwin/bin</Target>
                <Severity>10000</Severity>
                <RecurseLevel>-1</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/dt/bin</Target>
                <Severity>10000</Severity>
                <RecurseLevel>-1</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
        </StartPoints>
        <StopPoints />
        <Traverse>true</Traverse>
    </PosixFileRule>
    <PosixFileRule id="ID2" oid="-1y2p0ij32e84y:-1y2p0ij32e80w" class="rule" name="Solaris - Administrative Binaries">
        <Description></Description>
        <Severity>0</Severity>
        <Actions />
        <StartPoints>
            <Start>
                <Target>/sbin</Target>
                <Severity>10000</Severity>
                <RecurseLevel>-1</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/sbin</Target>
                <Severity>10000</Severity>
                <RecurseLevel>-1</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/local/sbin</Target>
                <Severity>10000</Severity>
                <RecurseLevel>-1</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
        </StartPoints>
        <StopPoints />
        <Traverse>true</Traverse>
    </PosixFileRule>
    <PosixFileRule id="ID3" oid="-1y2p0ij32e84y:-1y2p0ij32e80s" class="rule" name="Solaris - Library Files">
        <Description></Description>
        <Severity>0</Severity>
        <Actions />
        <StartPoints>
            <Start>
                <Target>/lib</Target>
                <Severity>35</Severity>
                <RecurseLevel>3</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/lib</Target>
                <Severity>35</Severity>
                <RecurseLevel>3</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/openwin/lib</Target>
                <Severity>35</Severity>
                <RecurseLevel>3</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/dt/lib</Target>
                <Severity>35</Severity>
                <RecurseLevel>3</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
        </StartPoints>
        <StopPoints />
        <Traverse>true</Traverse>
    </PosixFileRule>
    <PosixFileRule id="ID4" oid="-1y2p0ij32e84y:-1y2p0ij32e80n" class="rule" name="Solaris - Include Files">
        <Description></Description>
        <Severity>0</Severity>
        <Actions />
        <StartPoints>
            <Start>
                <Target>/usr/include</Target>
                <Severity>35</Severity>
                <RecurseLevel>-1</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/dt/include</Target>
                <Severity>35</Severity>
                <RecurseLevel>-1</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
        </StartPoints>
        <StopPoints />
        <Traverse>true</Traverse>
    </PosixFileRule>
    <PosixFileRule id="ID5" oid="-1y2p0ij32e84y:-1y2p0ij32e80c" class="rule" name="Solaris - System Directories">
        <Description></Description>
        <Severity>0</Severity>
        <Actions />
        <StartPoints>
            <Start>
                <Target>/platform</Target>
                <Severity>10000</Severity>
                <RecurseLevel>-1</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/opt</Target>
                <Severity>10000</Severity>
                <RecurseLevel>-1</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/kernel</Target>
                <Severity>10000</Severity>
                <RecurseLevel>-1</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
        </StartPoints>
        <StopPoints>
            <Stop>
                <Target>/opt/pkg</Target>
                <StopRecursion>true</StopRecursion>
            </Stop>
        </StopPoints>
        <Traverse>true</Traverse>
    </PosixFileRule>
    <PosixFileRule id="ID6" oid="-1y2p0ij32e84y:-1y2p0ij32e807" class="rule" name="Solaris - System Devices">
        <Description></Description>
        <Severity>0</Severity>
        <Actions />
        <StartPoints>
            <Start>
                <Target>/dev</Target>
                <Severity>35</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID15</Criteria>
            </Start>
            <Start>
                <Target>/dev/pts</Target>
                <Severity>35</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID16</Criteria>
            </Start>
            <Start>
                <Target>/dev/null</Target>
                <Severity>35</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID16</Criteria>
            </Start>
            <Start>
                <Target>/devices</Target>
                <Severity>35</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID15</Criteria>
            </Start>
        </StartPoints>
        <StopPoints />
        <Traverse>true</Traverse>
    </PosixFileRule>
    <PosixFileRule id="ID7" oid="-1y2p0ij32e84y:-1y2p0ij32e802" class="rule" name="Solaris - User Home Directories">
        <Description></Description>
        <Severity>0</Severity>
        <Actions />
        <StartPoints>
            <Start>
                <Target>/home</Target>
                <Severity>15</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID17</Criteria>
            </Start>
            <Start>
                <Target>/export</Target>
                <Severity>15</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID17</Criteria>
            </Start>
        </StartPoints>
        <StopPoints />
        <Traverse>false</Traverse>
    </PosixFileRule>
    <PosixFileRule id="ID8" oid="-1y2p0ij32e84y:-1y2p0ij32e7zt" class="rule" name="Solaris - System Processes">
        <Description></Description>
        <Severity>0</Severity>
        <Actions />
        <StartPoints>
            <Start>
                <Target>/proc</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID18</Criteria>
            </Start>
        </StartPoints>
        <StopPoints />
        <Traverse>true</Traverse>
    </PosixFileRule>
    <PosixFileRule id="ID9" oid="-1y2p0ij32e84y:-1y2p0ij32e7zr" class="rule" name="Solaris - Temporary Directory">
        <Description></Description>
        <Severity>0</Severity>
        <Actions>
            <ActionRef refid="ID19" />
        </Actions>
        <StartPoints>
            <Start>
                <Target>/tmp</Target>
                <Severity>35</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID17</Criteria>
            </Start>
            <Start>
                <Target>/var/tmp</Target>
                <Severity>65</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID17</Criteria>
            </Start>
        </StartPoints>
        <StopPoints />
        <Traverse>true</Traverse>
    </PosixFileRule>
    <EmailAction id="ID19" oid="-1y2p0ij32e8ce:-1y2p0ij2wjb13" class="action" name="Tsurnami Testing">
        <Description>Harris Desktop Testing</Description>
        <Users>
            <User>harris</User>
        </Users>
        <AdditionalEmailAddresses></AdditionalEmailAddresses>
        <SmtpEmailServer id="ID20" oid="-1y2p0ij32e82c:-1y2p0ij32e0qn" class="SmtpEmailServer" name="automan.ucdavis.edu">
            <Description>SMTP server</Description>
            <SmtpHost>automan.ucdavis.edu</SmtpHost>
            <SmtpPort>25</SmtpPort>
            <FromAddress>tripwire@automan.ucdavis.edu</FromAddress>
            <RequiresAuthentication>false</RequiresAuthentication>
            <AuthenticationUser></AuthenticationUser>
            <AuthenticationPassword encoding="dpwpbe">LtkaxbQooPWzwI78OLpc5Q==</AuthenticationPassword>
        </SmtpEmailServer>
        <Type>1</Type>
        <ContextLines>4</ContextLines>
        <ContextTollerance>3</ContextTollerance>
        <MaximumDifference>50</MaximumDifference>
    </EmailAction>
    <PosixFileRule id="ID10" oid="-1y2p0ij32e84y:-1y2p0ij32e7zp" class="rule" name="Solaris - Variable System Files">
        <Description></Description>
        <Severity>0</Severity>
        <Actions />
        <StartPoints>
            <Start>
                <Target>/var</Target>
                <Severity>35</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/var/spool</Target>
                <Severity>35</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID17</Criteria>
            </Start>
            <Start>
                <Target>/var/log</Target>
                <Severity>35</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters />
                <Criteria>ID17</Criteria>
            </Start>
        </StartPoints>
        <StopPoints />
        <Traverse>true</Traverse>
    </PosixFileRule>
    <PosixFileRule id="ID11" oid="-1y2p0ij32e84y:-1y2p0ij2zkuxg" class="rule" name="Solaris - KDC files">
        <Description>Kerberos Directory Controller checks</Description>
        <Severity>100</Severity>
        <Actions />
        <StartPoints>
            <Start>
                <Target>/krb5/admin_acl_file</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID21</Criteria>
            </Start>
            <Start>
                <Target>/krb5/csfpropd.ini</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID21</Criteria>
            </Start>
            <Start>
                <Target>/krb5/enigma.cfg</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID21</Criteria>
            </Start>
            <Start>
                <Target>/krb5/v5srvtab</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID21</Criteria>
            </Start>
            <Start>
                <Target>/krb5/krb.conf</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID21</Criteria>
            </Start>
            <Start>
                <Target>/krb5/krb.realms</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID21</Criteria>
            </Start>
        </StartPoints>
        <StopPoints />
        <Traverse>false</Traverse>
    </PosixFileRule>
    <PosixFileRule id="ID12" oid="-1y2p0ij32e84y:-1y2p0ij2zkux7" class="rule" name="Solaris - Kerberos clients">
        <Description>IET Solaris Kerberos client systems</Description>
        <Severity>100</Severity>
        <Actions />
        <StartPoints>
            <Start>
                <Target>/etc/krb5.conf</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID21</Criteria>
            </Start>
            <Start>
                <Target>/etc/krb5/krb5.conf</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID21</Criteria>
            </Start>
        </StartPoints>
        <StopPoints />
        <Traverse>true</Traverse>
    </PosixFileRule>
    <PosixFileRule id="ID13" oid="-1y2p0ij32e84y:-1y2p0ij2zkux2" class="rule" name="Solaris - CyberSafe systems">
        <Description>IET Solaris systems with CyberSafe installed</Description>
        <Severity>100</Severity>
        <Actions />
        <StartPoints>
            <Start>
                <Target>/krb5/krb.conf</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID21</Criteria>
            </Start>
            <Start>
                <Target>/krb5/v5srvtab</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID21</Criteria>
            </Start>
            <Start>
                <Target>/krb5/ksu.conf</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID21</Criteria>
            </Start>
            <Start>
                <Target>/krb5/klogin.ini</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID21</Criteria>
            </Start>
        </StartPoints>
        <StopPoints />
        <Traverse>true</Traverse>
    </PosixFileRule>
    <RuleGroup id="ID22" oid="-1y2p0ij32e8cn:-1y2p0ij2wbqt5" class="rulegroup" name="IET Solaris hourly common v1.1">
        <Description>IET Solaris hourly common v1.1</Description>
        <Children>
            <Child refid="ID23" />
        </Children>
    </RuleGroup>
    <PosixFileRule id="ID23" oid="-1y2p0ij32e84y:-1y2p0ij2w0d8v" class="rule" name="HIDE">
        <Description>HIDE rules swiped from snmpd.conf</Description>
        <Severity>100</Severity>
        <Actions />
        <StartPoints>
            <Start>
                <Target>/etc/inet/inetd.conf</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/var/adm/messages</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID17</Criteria>
            </Start>
            <Start>
                <Target>/var/spool/cron/crontabs/root</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/etc/passwd</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/etc/shadow</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/etc/inittab</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/etc/shells</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/etc/vfstab</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/etc/mail/sendmail.cf</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/sbin</Target>
                <Severity>10000</Severity>
                <RecurseLevel>100</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/sbin</Target>
                <Severity>10000</Severity>
                <RecurseLevel>100</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/bin</Target>
                <Severity>10000</Severity>
                <RecurseLevel>100</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/openwin/bin</Target>
                <Severity>10000</Severity>
                <RecurseLevel>100</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/usr/lib</Target>
                <Severity>10000</Severity>
                <RecurseLevel>100</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID14</Criteria>
            </Start>
            <Start>
                <Target>/var/log/authlog</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID17</Criteria>
            </Start>
            <Start>
                <Target>/var/log/authmsgs</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID17</Criteria>
            </Start>
            <Start>
                <Target>/bin/login</Target>
                <Severity>10000</Severity>
                <RecurseLevel>0</RecurseLevel>
                <StoreContent>false</StoreContent>
                <Filters>
                    <Filter>
                        <TypeId>1</TypeId>
                    </Filter>
                </Filters>
                <Criteria>ID15</Criteria>
            </Start>
        </StartPoints>
        <StopPoints>
            <Stop>
                <Target>/usr/lib/powerchute</Target>
                <StopRecursion>true</StopRecursion>
            </Stop>
        </StopPoints>
        <Traverse>true</Traverse>
    </PosixFileRule>
    <Criteria id="ID14" oid="-1y2p0ij32e85e:-1y2p0ij32e7zl" class="Criteria" name="$(FILE_STATIC)" Genre="com.tripwire.si.core.fs.posix.PosixFileSystemRule">
        <Description>TFS - pugsmMA</Description>
        <Attributes>
            <ElementType>2</ElementType>
            <Attribute>ACL</Attribute>
            <Attribute>Permissions</Attribute>
            <Attribute>User</Attribute>
            <Attribute>Modify</Attribute>
            <Attribute>Group</Attribute>
        </Attributes>
        <Attributes>
            <ElementType>1</ElementType>
            <Attribute>ACL</Attribute>
            <Attribute>Permissions</Attribute>
            <Attribute>Size</Attribute>
            <Attribute>User</Attribute>
            <Attribute>MD5</Attribute>
            <Attribute>Modify</Attribute>
            <Attribute>Group</Attribute>
        </Attributes>
    </Criteria>
    <Criteria id="ID15" oid="-1y2p0ij32e85e:-1y2p0ij32e7zk" class="Criteria" name="$(FILE_STATIC) -im" Genre="com.tripwire.si.core.fs.posix.PosixFileSystemRule">
        <Description>TFS - pugsMA</Description>
        <Attributes>
            <ElementType>2</ElementType>
            <Attribute>ACL</Attribute>
            <Attribute>Permissions</Attribute>
            <Attribute>User</Attribute>
            <Attribute>Group</Attribute>
        </Attributes>
        <Attributes>
            <ElementType>1</ElementType>
            <Attribute>ACL</Attribute>
            <Attribute>Permissions</Attribute>
            <Attribute>Size</Attribute>
            <Attribute>User</Attribute>
            <Attribute>MD5</Attribute>
            <Attribute>Group</Attribute>
        </Attributes>
    </Criteria>
    <Criteria id="ID16" oid="-1y2p0ij32e85e:-1y2p0ij32e7zh" class="Criteria" name="$(FILE_DEVICE)" Genre="com.tripwire.si.core.fs.posix.PosixFileSystemRule">
        <Description>TFS - pugsA</Description>
        <Attributes>
            <ElementType>2</ElementType>
            <Attribute>ACL</Attribute>
            <Attribute>Permissions</Attribute>
            <Attribute>User</Attribute>
            <Attribute>Group</Attribute>
        </Attributes>
        <Attributes>
            <ElementType>1</ElementType>
            <Attribute>ACL</Attribute>
            <Attribute>Permissions</Attribute>
            <Attribute>Size</Attribute>
            <Attribute>User</Attribute>
            <Attribute>Group</Attribute>
        </Attributes>
    </Criteria>
    <Criteria id="ID17" oid="-1y2p0ij32e85e:-1y2p0ij32e7zj" class="Criteria" name="$(FILE_DYNAMIC) -id" Genre="com.tripwire.si.core.fs.posix.PosixFileSystemRule">
        <Description>TFS - pugA</Description>
        <Attributes>
            <ElementType>2</ElementType>
            <Attribute>ACL</Attribute>
            <Attribute>Permissions</Attribute>
            <Attribute>User</Attribute>
            <Attribute>Group</Attribute>
        </Attributes>
        <Attributes>
            <ElementType>1</ElementType>
            <Attribute>ACL</Attribute>
            <Attribute>Permissions</Attribute>
            <Attribute>User</Attribute>
            <Attribute>Group</Attribute>
        </Attributes>
    </Criteria>
    <Criteria id="ID18" oid="-1y2p0ij32e85e:-1y2p0ij32e7zg" class="Criteria" name="$(FILE_PROC)" Genre="com.tripwire.si.core.fs.posix.PosixFileSystemRule">
        <Description>TFS - pugMA</Description>
        <Attributes>
            <ElementType>2</ElementType>
            <Attribute>ACL</Attribute>
            <Attribute>Permissions</Attribute>
            <Attribute>User</Attribute>
            <Attribute>Group</Attribute>
        </Attributes>
        <Attributes>
            <ElementType>1</ElementType>
            <Attribute>ACL</Attribute>
            <Attribute>Permissions</Attribute>
            <Attribute>User</Attribute>
            <Attribute>MD5</Attribute>
            <Attribute>Group</Attribute>
        </Attributes>
    </Criteria>
    <Criteria id="ID21" oid="-1y2p0ij32e85e:-1y2p0ij32d8zp" class="Criteria" name="$(SEC_CONFIG)" Genre="com.tripwire.si.core.fs.posix.PosixFileSystemRule">
        <Description>TFS - pug</Description>
        <Attributes>
            <ElementType>2</ElementType>
            <Attribute>Permissions</Attribute>
            <Attribute>User</Attribute>
            <Attribute>Group</Attribute>
        </Attributes>
        <Attributes>
            <ElementType>1</ElementType>
            <Attribute>Permissions</Attribute>
            <Attribute>User</Attribute>
            <Attribute>Group</Attribute>
        </Attributes>
    </Criteria>
</Rules>