anchor.diff:  suggestion[]=PKGS-7394|Install package apt-show-versions for patch management purposes|-|-|
   suggestion[]=NETW-3032|Consider running ARP monitoring software (arpwatch,arpon)|-|-|
   suggestion[]=NAME-4028|Check DNS configuration for the dns domain name|-|-|
  +suggestion[]=LOGG-2190|Check what deleted files are still in use and why.|-|-|
   suggestion[]=FIRE-4513|Check iptables rules to see which rules are currently not used|-|-|
   suggestion[]=FILE-6310|To decrease the impact of a full /var file system, place /var on a separate partition|-|-|
  -suggestion[]=FILE-6310|To decrease the impact of a full /home file system, place /home on a separate partition|-|-|
   suggestion[]=BOOT-5122|Set a password on GRUB bootloader to prevent altering boot configuration (e.g. boot in single user mode without password)|-|-|
   suggestion[]=BANN-7130|Add legal banner to /etc/issue.net, to warn unauthorized users|-|-|
   suggestion[]=BANN-7126|Add a legal banner to /etc/issue, to warn unauthorized users|-|-|
   suggestion[]=ACCT-9626|Enable sysstat to collect accounting (no results)|-|-|
   ----
   
  -=== Score: 97
  +=== Score: 99
   
   == cosmic
   ----
  -Failed number of tests: 25
  +Failed number of tests: 14
   ----
   
   === Failed tests:
   ----
   not ok 23 Verify that runtime kernel module squashfs is disabled
   not ok 25 Verify that runtime kernel module vfat is disabled
  -not ok 59 Verify that /home is a separate partition
  -not ok 60 Verify that /home is mounted with nodev
  -not ok 61 Verify that /home is mounted with nosuid
  -not ok 62 Verify that /var/log/audit is a separate partition
  -not ok 63 Verify that /var/log/audit is mounted with nodev
  -not ok 64 Verify that /var/log/audit is mounted with nosuid
  -not ok 65 Verify that /var/log/audit is mounted with noexec
  -not ok 66 Verify that /var/log is a separate partition
  -not ok 67 Verify that /var/log is mounted with nodev
  -not ok 68 Verify that /var/log is mounted with nosuid
  -not ok 69 Verify that /var/log is mounted with noexec
   not ok 109 Verify kernel.modules_disabled in /etc/sysctl.*
   not ok 159 Verify sysctl runtime kernel.modules_disabled
   not ok 432 Ensure user games is removed
  
positive.code: 
  == bionic
  ----
  Failed number of tests: 19
  ----
  
  === Failed tests:
  ----
  not ok 23 Verify that runtime kernel module squashfs is disabled
  not ok 25 Verify that runtime kernel module vfat is disabled
  not ok 59 Verify that /home is a separate partition
  not ok 60 Verify that /home is mounted with nodev
  not ok 61 Verify that /home is mounted with nosuid
  not ok 62 Verify that /var/log/audit is a separate partition
  not ok 63 Verify that /var/log/audit is mounted with nodev
  not ok 64 Verify that /var/log/audit is mounted with nosuid
  not ok 65 Verify that /var/log/audit is mounted with noexec
  not ok 66 Verify that /var/log is a separate partition
  not ok 67 Verify that /var/log is mounted with nodev
  not ok 68 Verify that /var/log is mounted with nosuid
  not ok 69 Verify that /var/log is mounted with noexec
  not ok 109 Verify kernel.modules_disabled in /etc/sysctl.*
  not ok 159 Verify sysctl runtime kernel.modules_disabled
  not ok 469 Verify that DNSOverTLS is used in /etc/systemd/resolved.conf
  
negative.code: suggestion[]=LOGG-2190|Check what deleted files are still in use and why.|-|-|
  suggestion[]=FIRE-4513|Check iptables rules to see which rules are currently not used|-|-|
  suggestion[]=FILE-6310|To decrease the impact of a full /var file system, place /var on a separate partition|-|-|
  suggestion[]=BOOT-5122|Set a password on GRUB bootloader to prevent altering boot configuration (e.g. boot in single user mode without password)|-|-|
  suggestion[]=BANN-7130|Add legal banner to /etc/issue.net, to warn unauthorized users|-|-|
  suggestion[]=BANN-7126|Add a legal banner to /etc/issue, to warn unauthorized users|-|-|
  suggestion[]=ACCT-9626|Enable sysstat to collect accounting (no results)|-|-|
  ----
  
  === Score: 98
  
  == disco
  ----
  