{
  "type": "ubuntu",
  "gcb_id": "TWGCB-01-014",
  "title": "Ubuntu 22.04 LTS 政府組態基準檢測報告",
  "hostname": "pake",
  "scan_time": "2026-03-16T17:57:50.429821",
  "summary": {
    "total": 193,
    "pass": 136,
    "fail": 57,
    "error": 0,
    "excluded": 0,
    "compliance_rate": 70.5
  },
  "results": [
    {
      "id": "TWGCB-01-014-0001",
      "category": "磁碟與檔案系統",
      "name": "cramfs 檔案系統",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo bash -c 'echo \"install cramfs /bin/false\" > /etc/modprobe.d/cramfs.conf && echo \"blacklist cramfs\" >> /etc/modprobe.d/cramfs.conf' && sudo modprobe -r cramfs 2>/dev/null"
    },
    {
      "id": "TWGCB-01-014-0002",
      "category": "磁碟與檔案系統",
      "name": "squashfs 檔案系統",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo bash -c 'echo \"install squashfs /bin/false\" > /etc/modprobe.d/squashfs.conf && echo \"blacklist squashfs\" >> /etc/modprobe.d/squashfs.conf'"
    },
    {
      "id": "TWGCB-01-014-0003",
      "category": "磁碟與檔案系統",
      "name": "udf 檔案系統",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo bash -c 'echo \"install udf /bin/false\" > /etc/modprobe.d/udf.conf && echo \"blacklist udf\" >> /etc/modprobe.d/udf.conf'"
    },
    {
      "id": "TWGCB-01-014-0004",
      "category": "磁碟與檔案系統",
      "name": "設定/tmp 目錄之檔案系統",
      "expected": "tmpfs",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0005",
      "category": "磁碟與檔案系統",
      "name": "設定/tmp nodev 選項",
      "expected": "啟用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "編輯 /etc/fstab，在 /tmp 掛載點的第 4 欄加入 nodev\n執行: sudo mount -o remount,nodev /tmp"
    },
    {
      "id": "TWGCB-01-014-0006",
      "category": "磁碟與檔案系統",
      "name": "設定/tmp nosuid 選項",
      "expected": "啟用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "編輯 /etc/fstab，在 /tmp 掛載點的第 4 欄加入 nosuid\n執行: sudo mount -o remount,nosuid /tmp"
    },
    {
      "id": "TWGCB-01-014-0007",
      "category": "磁碟與檔案系統",
      "name": "設定/tmp noexec 選項",
      "expected": "啟用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "編輯 /etc/fstab，在 /tmp 掛載點的第 4 欄加入 noexec\n執行: sudo mount -o remount,noexec /tmp"
    },
    {
      "id": "TWGCB-01-014-0008",
      "category": "磁碟與檔案系統",
      "name": "設定/dev/shm nodev",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0009",
      "category": "磁碟與檔案系統",
      "name": "設定/dev/shm nosuid",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0010",
      "category": "磁碟與檔案系統",
      "name": "設定/dev/shm noexec",
      "expected": "啟用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "執行: sudo mount -o remount,noexec /dev/shm"
    },
    {
      "id": "TWGCB-01-014-0011",
      "category": "磁碟與檔案系統",
      "name": "停用 USB 儲存裝置",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo bash -c 'echo \"install usb-storage /bin/false\" > /etc/modprobe.d/usb-storage.conf && echo \"blacklist usb-storage\" >> /etc/modprobe.d/usb-storage.conf' && sudo modprobe -r usb-storage 2>/dev/null"
    },
    {
      "id": "TWGCB-01-014-0012",
      "category": "磁碟與檔案系統",
      "name": "啟用 AIDE",
      "expected": "啟用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo apt install aide aide-common -y && sudo aideinit && sudo cp /var/lib/aide/aide.db.new /var/lib/aide/aide.db"
    },
    {
      "id": "TWGCB-01-014-0013",
      "category": "磁碟與",
      "name": "設定/var 目錄之",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0014",
      "category": "磁碟與檔案系統",
      "name": "bootloader 設定檔權限",
      "expected": "600",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0015",
      "category": "磁碟與",
      "name": "設定/var/tmp 目",
      "expected": "啟用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "為 /var/tmp 建立獨立掛載點"
    },
    {
      "id": "TWGCB-01-014-0016",
      "category": "磁碟與檔案系統",
      "name": "核心傾印限制",
      "expected": "啟用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo bash -c 'echo \"* hard core 0\" >> /etc/security/limits.conf'\nsudo bash -c 'echo \"fs.suid_dumpable = 0\" >> /etc/sysctl.d/99-security.conf' && sudo sysctl -p"
    },
    {
      "id": "TWGCB-01-014-0017",
      "category": "磁碟與檔案系統",
      "name": "啟用 ASLR",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0018",
      "category": "磁碟與檔案系統",
      "name": "停用 prelink",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo apt purge prelink -y"
    },
    {
      "id": "TWGCB-01-014-0019",
      "category": "磁碟與",
      "name": "設定/var/log 目",
      "expected": "啟用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "為 /var/log 建立獨立掛載點"
    },
    {
      "id": "TWGCB-01-014-0020",
      "category": "系統設定與維護",
      "name": "設定時間同步",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0021",
      "category": "系統設定與維護",
      "name": "停用 X Window System",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo apt purge xserver-xorg* -y（僅限伺服器環境）"
    },
    {
      "id": "TWGCB-01-014-0022",
      "category": "系統設定與維護",
      "name": "停用 Avahi 伺服器",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo systemctl stop avahi-daemon && sudo systemctl disable avahi-daemon && sudo apt purge avahi-daemon -y"
    },
    {
      "id": "TWGCB-01-014-0023",
      "category": "系統設定與維護",
      "name": "停用 CUPS",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo systemctl stop cups && sudo systemctl disable cups"
    },
    {
      "id": "TWGCB-01-014-0024",
      "category": "系統設定與維護",
      "name": "停用 DHCP 伺服器",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo apt purge isc-dhcp-server -y"
    },
    {
      "id": "TWGCB-01-014-0025",
      "category": "系統設定與維護",
      "name": "停用 DNS 伺服器",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo apt purge bind9 -y"
    },
    {
      "id": "TWGCB-01-014-0026",
      "category": "系統設定與維護",
      "name": "停用 FTP 伺服器",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo apt purge vsftpd -y"
    },
    {
      "id": "TWGCB-01-014-0027",
      "category": "系統設定與維護",
      "name": "停用 Samba",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo apt purge samba -y"
    },
    {
      "id": "TWGCB-01-014-0028",
      "category": "系統設定與維護",
      "name": "停用 NFS 伺服器",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo apt purge nfs-kernel-server -y"
    },
    {
      "id": "TWGCB-01-014-0029",
      "category": "系統設定與維護",
      "name": "停用 rsync",
      "expected": "停用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0030",
      "category": "網路設定",
      "name": "停用 IP 轉發",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo bash -c 'echo \"net.ipv4.ip_forward = 0\" >> /etc/sysctl.d/99-security.conf' && sudo sysctl -w net.ipv4.ip_forward=0"
    },
    {
      "id": "TWGCB-01-014-0031",
      "category": "網路設定",
      "name": "停用 ICMP 重導向傳送",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo sysctl -w net.ipv4.conf.all.send_redirects=0 && sudo sysctl -w net.ipv4.conf.default.send_redirects=0\n寫入 /etc/sysctl.d/99-security.conf 永久生效"
    },
    {
      "id": "TWGCB-01-014-0032",
      "category": "網路設定",
      "name": "停用來源路由封包",
      "expected": "停用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0033",
      "category": "網路設定",
      "name": "啟用反向路徑過濾",
      "expected": "啟用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo sysctl -w net.ipv4.conf.all.rp_filter=1\n寫入 /etc/sysctl.d/99-security.conf"
    },
    {
      "id": "TWGCB-01-014-0034",
      "category": "網路設定",
      "name": "啟用 TCP SYN Cookies",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0035",
      "category": "網路設定",
      "name": "拒絕 ICMP 重導向",
      "expected": "停用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0036",
      "category": "網路設定",
      "name": "記錄可疑封包",
      "expected": "啟用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo sysctl -w net.ipv4.conf.all.log_martians=1\n寫入 /etc/sysctl.d/99-security.conf"
    },
    {
      "id": "TWGCB-01-014-0037",
      "category": "網路設定",
      "name": "忽略 ICMP 廣播回應",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0038",
      "category": "系統設",
      "name": "單一使用者模式",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0039",
      "category": "系統設",
      "name": "核心傾印功能",
      "expected": "停用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0040",
      "category": "日誌與稽核",
      "name": "啟用 auditd",
      "expected": "啟用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo apt install auditd -y && sudo systemctl enable auditd && sudo systemctl start auditd"
    },
    {
      "id": "TWGCB-01-014-0041",
      "category": "系統設",
      "name": "prelink 套件",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0042",
      "category": "系統設",
      "name": "自動錯誤回報服",
      "expected": "停用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0043",
      "category": "日誌與稽核",
      "name": "啟用 rsyslog",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0044",
      "category": "系統設",
      "name": "/etc/passwd 檔案",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0045",
      "category": "日誌與稽核",
      "name": "設定日誌輪替",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0046",
      "category": "AppArmor",
      "name": "啟用 AppArmor",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0047",
      "category": "系統設",
      "name": "/etc/group 檔案所 ▪ 這項原則設定決定",
      "expected": "root",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0048",
      "category": "cron 設定",
      "name": "啟用 cron 服務",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0049",
      "category": "cron 設定",
      "name": "crontab 權限",
      "expected": "600",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 600 /etc/crontab && sudo chown root:root /etc/crontab"
    },
    {
      "id": "TWGCB-01-014-0050",
      "category": "系統設",
      "name": "/etc/gshadow 檔",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0051",
      "category": "帳號與存取控制",
      "name": "密碼最長使用期限",
      "expected": "90天",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo sed -i 's/^PASS_MAX_DAYS.*/PASS_MAX_DAYS 90/' /etc/login.defs"
    },
    {
      "id": "TWGCB-01-014-0052",
      "category": "帳號與存取控制",
      "name": "密碼最短使用期限",
      "expected": "7天",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo sed -i 's/^PASS_MIN_DAYS.*/PASS_MIN_DAYS 7/' /etc/login.defs"
    },
    {
      "id": "TWGCB-01-014-0053",
      "category": "系統設",
      "name": "/etc/shadow-檔案 ▪ 這項原則設定決定",
      "expected": "root",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0054",
      "category": "帳號與存取控制",
      "name": "密碼最短長度",
      "expected": "12字元",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo apt install libpam-pwquality -y\nsudo sed -i 's/^# minlen.*/minlen = 12/' /etc/security/pwquality.conf"
    },
    {
      "id": "TWGCB-01-014-0055",
      "category": "系統設",
      "name": "/etc/group-檔案",
      "expected": "root",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0056",
      "category": "系統設",
      "name": "/etc/group-檔案",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0057",
      "category": "系統設",
      "name": "/etc/gshadow-檔",
      "expected": "root",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0058",
      "category": "帳號與存取控制",
      "name": "停用 root SSH 登入",
      "expected": "no",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo sed -i 's/^#\\?PermitRootLogin.*/PermitRootLogin no/' /etc/ssh/sshd_config && sudo systemctl restart sshd"
    },
    {
      "id": "TWGCB-01-014-0059",
      "category": "系統設",
      "name": "其他使用者寫入",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0060",
      "category": "帳號與存取控制",
      "name": "停用 SSH 空密碼登入",
      "expected": "no",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0061",
      "category": "帳號與存取控制",
      "name": "SSH MaxAuthTries",
      "expected": "4",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo sed -i 's/^#\\?MaxAuthTries.*/MaxAuthTries 4/' /etc/ssh/sshd_config && sudo systemctl restart sshd"
    },
    {
      "id": "TWGCB-01-014-0062",
      "category": "系統設",
      "name": "帳號不使用空白",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0063",
      "category": "帳號與存取控制",
      "name": "/etc/passwd 權限",
      "expected": "644",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0064",
      "category": "帳號與存取控制",
      "name": "/etc/shadow 權限",
      "expected": "640",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0065",
      "category": "帳號與存取控制",
      "name": "僅 root UID=0",
      "expected": "僅root",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0066",
      "category": "系統設",
      "name": "使用者家目錄擁",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0067",
      "category": "系統設",
      "name": "使用者家目錄擁",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0068",
      "category": "系統設",
      "name": "使用者家目錄之",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0069",
      "category": "系統設",
      "name": "使用者家目錄之",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0070",
      "category": "系統設",
      "name": "使用者家目錄之",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0071",
      "category": "系統設",
      "name": "使用者家目錄之",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0072",
      "category": "系統設",
      "name": "檢查/etc/passwd",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0073",
      "category": "系統設",
      "name": "檢查/etc/passwd",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0074",
      "category": "系統設",
      "name": "唯一之 UID",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0075",
      "category": "系統設",
      "name": "唯一之 GID",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0076",
      "category": "系統設",
      "name": "唯一之使用者帳",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0077",
      "category": "系統設",
      "name": "唯一之群組名稱",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0078",
      "category": "系統設",
      "name": "shadow 群組成員 ▪ 這項原則設定決定 shadow ▪ 開啟終端機，執行以下指令，列",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0079",
      "category": "系統服",
      "name": "avahi-daemon 服",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo apt purge avahi* -y"
    },
    {
      "id": "TWGCB-01-014-0080",
      "category": "系統服",
      "name": "Samba 服務",
      "expected": "停用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0081",
      "category": "系統服",
      "name": "Squid 服務",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo apt purge squid* -y"
    },
    {
      "id": "TWGCB-01-014-0082",
      "category": "系統服",
      "name": "SNMP 服務",
      "expected": "停用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0083",
      "category": "系統服",
      "name": "FTP 伺服器",
      "expected": "停用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0084",
      "category": "系統服",
      "name": "rsync 服務",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo apt purge rsync* -y"
    },
    {
      "id": "TWGCB-01-014-0085",
      "category": "安裝與",
      "name": "NIS 用戶端套件",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0086",
      "category": "安裝與",
      "name": "rsh 用戶端套件",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0087",
      "category": "安裝與",
      "name": "talk 用戶端套件",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0088",
      "category": "安裝與",
      "name": "telnet 用戶端套",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0089",
      "category": "網路設",
      "name": "IP 轉送",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0090",
      "category": "網路設",
      "name": "所有網路介面禁",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0091",
      "category": "網路設",
      "name": "預設網路介面禁",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0092",
      "category": "網路設",
      "name": "所有網路介面阻",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0093",
      "category": "網路設",
      "name": "預設網路介面阻",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0094",
      "category": "網路設",
      "name": "所有網路介面阻",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0095",
      "category": "網路設",
      "name": "預設網路介面阻",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0096",
      "category": "網路設",
      "name": "所有網路介面阻",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0097",
      "category": "網路設",
      "name": "預設網路介面阻",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0098",
      "category": "網路設",
      "name": "所有網路介面記",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0099",
      "category": "網路設",
      "name": "預設網路介面記",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0100",
      "category": "網路設",
      "name": "不回應 ICMP 廣",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0101",
      "category": "網路設",
      "name": "忽略偽造之",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0102",
      "category": "網路設",
      "name": "所有網路介面啟",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0103",
      "category": "網路設",
      "name": "預設網路介面啟",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0104",
      "category": "網路設",
      "name": "TCP SYN",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0105",
      "category": "網路設",
      "name": "所有網路介面阻",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0106",
      "category": "網路設",
      "name": "預設網路介面阻",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0107",
      "category": "網路設",
      "name": "DCCP 協定",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "echo 'install dccp /bin/false' | sudo tee /etc/modprobe.d/dccp.conf"
    },
    {
      "id": "TWGCB-01-014-0108",
      "category": "網路設",
      "name": "SCTP 協定",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "echo 'install sctp /bin/false' | sudo tee /etc/modprobe.d/sctp.conf"
    },
    {
      "id": "TWGCB-01-014-0109",
      "category": "網路設",
      "name": "RDS 協定",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "echo 'install rds /bin/false' | sudo tee /etc/modprobe.d/rds.conf"
    },
    {
      "id": "TWGCB-01-014-0110",
      "category": "網路設",
      "name": "TIPC 協定",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "echo 'install tipc /bin/false' | sudo tee /etc/modprobe.d/tipc.conf"
    },
    {
      "id": "TWGCB-01-014-0111",
      "category": "網路設",
      "name": "無線網路介面",
      "expected": "停用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo nmcli radio wifi off"
    },
    {
      "id": "TWGCB-01-014-0112",
      "category": "日誌與",
      "name": "auditd 套件",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0113",
      "category": "日誌與",
      "name": "auditd 服務",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0114",
      "category": "日誌與",
      "name": "稽核 auditd 服務",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0115",
      "category": "日誌與",
      "name": "稽核待辦事項數",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0116",
      "category": "日誌與",
      "name": "稽核日誌檔案所",
      "expected": "root",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0117",
      "category": "日誌與",
      "name": "稽核日誌檔案權",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0118",
      "category": "日誌與",
      "name": "稽核日誌目錄所",
      "expected": "root",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0119",
      "category": "日誌與",
      "name": "稽核日誌目錄權",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0120",
      "category": "日誌與",
      "name": "稽核規則檔案所",
      "expected": "root",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0121",
      "category": "日誌與",
      "name": "稽核規則檔案權",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0122",
      "category": "日誌與",
      "name": "稽核設定檔案所",
      "expected": "root",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0123",
      "category": "日誌與",
      "name": "稽核設定檔案權",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0124",
      "category": "日誌與",
      "name": "稽核工具權限",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0125",
      "category": "日誌與",
      "name": "稽核工具所有權",
      "expected": "root",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0126",
      "category": "日誌與",
      "name": "保護稽核工具",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0127",
      "category": "日誌與",
      "name": "稽核日誌檔案大",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0128",
      "category": "日誌與",
      "name": "稽核日誌達到其",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0129",
      "category": "日誌與",
      "name": "記錄系統管理者",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0130",
      "category": "日誌與",
      "name": "記錄變更登入與",
      "expected": "啟用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "新增 audit 規則監控登入事件"
    },
    {
      "id": "TWGCB-01-014-0131",
      "category": "日誌與",
      "name": "記錄會談啟始資",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0132",
      "category": "日誌與",
      "name": "記錄變更日期與",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0133",
      "category": "日誌與",
      "name": "記錄變更系統強",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0134",
      "category": "日誌與",
      "name": "記錄變更系統網",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0135",
      "category": "日誌與",
      "name": "記錄變更自主存",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0136",
      "category": "日誌與",
      "name": "記錄不成功之未",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0137",
      "category": "日誌與",
      "name": "記錄變更使用者",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0138",
      "category": "日誌與",
      "name": "記錄變更檔案系",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0139",
      "category": "日誌與",
      "name": "記錄特權指令使",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0140",
      "category": "日誌與",
      "name": "記錄檔案刪除事",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0141",
      "category": "日誌與",
      "name": "記錄核心模組掛",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0142",
      "category": "日誌與",
      "name": "記錄系統管理者",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0143",
      "category": "日誌與",
      "name": "記錄 setfacl 指令 ▪ 這項原則設定決定是否記",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0144",
      "category": "日誌與",
      "name": "記錄 usermod 指",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0145",
      "category": "日誌與",
      "name": "記錄 chacl 指令",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0146",
      "category": "日誌與",
      "name": "記錄 kmod 指令",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0147",
      "category": "日誌與",
      "name": "記錄 execve 系統 ▪ 這項原則設定決定是否記 ▪ 開啟終端機，執行 vim 指令，在",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0148",
      "category": "日誌與",
      "name": "auditd 設定不變",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0149",
      "category": "日誌與",
      "name": "rsyslog 套件",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0150",
      "category": "日誌與",
      "name": "rsyslog 服務",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0151",
      "category": "日誌與",
      "name": "設定 rsyslog 日",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0152",
      "category": "日誌與",
      "name": "設定 journald 將",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0153",
      "category": "日誌與",
      "name": "設定 journald 壓",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0154",
      "category": "日誌與",
      "name": "設定 journald 將",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0155",
      "category": "AppAr",
      "name": "AppArmor 套件",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0156",
      "category": "AppAr",
      "name": "開機載入程式啟",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0157",
      "category": "AppAr",
      "name": "AppArmor 啟用",
      "expected": "啟用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0158",
      "category": "cron設cron守護程序",
      "name": "▪ 這項原則設定決定是否啟",
      "expected": "啟用",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 600 /etc/crontab"
    },
    {
      "id": "TWGCB-01-014-0159",
      "category": "cron設/etc/crontab檔案",
      "name": "▪ 這項原則設定決定是否設",
      "expected": "root",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 600 /etc/crontab"
    },
    {
      "id": "TWGCB-01-014-0160",
      "category": "cron設/etc/crontab檔案",
      "name": "▪ 這項原則設定決定是否設",
      "expected": "請參閱文件",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 600 /etc/crontab"
    },
    {
      "id": "TWGCB-01-014-0161",
      "category": "cron設/etc/cron.hourly",
      "name": "▪ 這項原則設定決定是否設",
      "expected": "root",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 700 /etc/cron.hourly"
    },
    {
      "id": "TWGCB-01-014-0162",
      "category": "cron設/etc/cron.hourly",
      "name": "▪ 這項原則設定決定是否設",
      "expected": "請參閱文件",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 700 /etc/cron.hourly"
    },
    {
      "id": "TWGCB-01-014-0163",
      "category": "cron設/etc/cron.daily目",
      "name": "▪ 這項原則設定決定是否設",
      "expected": "root",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 700 /etc/cron.daily"
    },
    {
      "id": "TWGCB-01-014-0164",
      "category": "cron設/etc/cron.daily目",
      "name": "▪ 這項原則設定決定是否設",
      "expected": "請參閱文件",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 700 /etc/cron.daily"
    },
    {
      "id": "TWGCB-01-014-0165",
      "category": "cron設/etc/cron.weekly",
      "name": "▪ 這項原則設定決定是否設",
      "expected": "root",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 700 /etc/cron.weekly"
    },
    {
      "id": "TWGCB-01-014-0166",
      "category": "cron設/etc/cron.weekly",
      "name": "▪ 這項原則設定決定是否設",
      "expected": "請參閱文件",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 700 /etc/cron.weekly"
    },
    {
      "id": "TWGCB-01-014-0167",
      "category": "cron設/etc/cron.monthly",
      "name": "▪ 這項原則設定決定是否設 開啟終端機，執行以下指令，設定 root:root",
      "expected": "root",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 700 /etc/cron.monthly"
    },
    {
      "id": "TWGCB-01-014-0168",
      "category": "cron設/etc/cron.monthly",
      "name": "▪ 這項原則設定決定是否設 開啟終端機，執行以下指令，設定 700 或更",
      "expected": "請參閱文件",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 700 /etc/cron.monthly"
    },
    {
      "id": "TWGCB-01-014-0169",
      "category": "cron設/etc/cron.d目錄",
      "name": "▪ 這項原則設定決定是否設",
      "expected": "root",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 700 /etc/cron.d"
    },
    {
      "id": "TWGCB-01-014-0170",
      "category": "cron設/etc/cron.d目錄",
      "name": "▪ 這項原則設定決定是否設",
      "expected": "請參閱文件",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo chmod 700 /etc/cron.d"
    },
    {
      "id": "TWGCB-01-014-0171",
      "category": "cron設at.allow與",
      "name": "▪ 這項原則設定決定是否設",
      "expected": "root",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo touch /etc/at.allow && sudo chmod 640 /etc/at.allow"
    },
    {
      "id": "TWGCB-01-014-0172",
      "category": "cron設at.allow與",
      "name": "▪ 這項原則設定決定是否設",
      "expected": "請參閱文件",
      "status": "fail",
      "output": "FAIL",
      "remediation": "sudo touch /etc/at.allow && sudo chmod 640 /etc/at.allow"
    },
    {
      "id": "TWGCB-01-014-0173",
      "category": "帳號與",
      "name": "通行碼最小長度",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0174",
      "category": "帳號與",
      "name": "通行碼必須至少",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0175",
      "category": "帳號與",
      "name": "通行碼必須至少",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0176",
      "category": "帳號與",
      "name": "通行碼必須至少",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0177",
      "category": "帳號與",
      "name": "通行碼必須至少",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0178",
      "category": "帳號與",
      "name": "帳戶鎖定閾值",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0179",
      "category": "帳號與",
      "name": "帳戶鎖定時間",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0180",
      "category": "帳號與",
      "name": "強制執行通行碼",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0181",
      "category": "帳號與",
      "name": "系統通行碼雜湊",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0182",
      "category": "帳號與",
      "name": "使用者通行碼雜",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0183",
      "category": "帳號與",
      "name": "通行碼最短使用",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0184",
      "category": "帳號與",
      "name": "通行碼最長使用",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0185",
      "category": "帳號與",
      "name": "通行碼到期前提",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0186",
      "category": "帳號與",
      "name": "通行碼到期後，",
      "expected": "停用",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0187",
      "category": "帳號與",
      "name": "要求使用者必須",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0188",
      "category": "帳號與",
      "name": "通行碼最後變更",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0189",
      "category": "帳號與",
      "name": "系統帳號登入方",
      "expected": "請參閱文件",
      "status": "fail",
      "output": "FAIL",
      "remediation": "將系統帳號的 shell 改為 /usr/sbin/nologin"
    },
    {
      "id": "TWGCB-01-014-0190",
      "category": "帳號與",
      "name": "Bash shell 閒置",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0191",
      "category": "帳號與",
      "name": "root 帳號所屬群",
      "expected": "root",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0192",
      "category": "帳號與",
      "name": "所有使用者帳號",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    },
    {
      "id": "TWGCB-01-014-0193",
      "category": "帳號與",
      "name": "可使用 su 指令",
      "expected": "請參閱文件",
      "status": "pass",
      "output": "PASS"
    }
  ]
}