Stabilization: Adjust sysctl bash template to use build time variables

[Mab879]

Backport #15017

[github-actions]

This datastream diff is auto generated by the check Compare DS/Generate Diff

Click here to see the full diff

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_disable_ipv6' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_disable_ipv6
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_disable_ipv6
@@ -38,7 +38,7 @@
 #	else, add "net.ipv6.conf.all.disable_ipv6 = 1" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.all.disable_ipv6/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_disable_ipv6' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_disable_ipv6
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_disable_ipv6
@@ -38,7 +38,7 @@
 #	else, add "net.ipv6.conf.default.disable_ipv6 = 1" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.default.disable_ipv6/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_ra' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_ra
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_ra
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.all.accept_ra = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.all.accept_ra/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_ra_defrtr' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_ra_defrtr
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_ra_defrtr
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.all.accept_ra_defrtr = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.all.accept_ra_defrtr/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_ra_pinfo' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_ra_pinfo
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_ra_pinfo
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.all.accept_ra_pinfo = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.all.accept_ra_pinfo/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_ra_rtr_pref' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_ra_rtr_pref
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_ra_rtr_pref
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.all.accept_ra_rtr_pref = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.all.accept_ra_rtr_pref/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_redirects' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_redirects
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_redirects
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.all.accept_redirects = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.all.accept_redirects/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_source_route' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_source_route
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_source_route
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.all.accept_source_route = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.all.accept_source_route/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_autoconf' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_autoconf
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_autoconf
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.all.autoconf = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.all.autoconf/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_forwarding' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_forwarding
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_forwarding
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.all.forwarding = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.all.forwarding/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_max_addresses' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_max_addresses
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_max_addresses
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.all.max_addresses = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.all.max_addresses/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_router_solicitations' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_router_solicitations
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_router_solicitations
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.all.router_solicitations = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.all.router_solicitations/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_ra' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_ra
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_ra
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.default.accept_ra = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.default.accept_ra/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_ra_defrtr' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_ra_defrtr
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_ra_defrtr
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.default.accept_ra_defrtr = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.default.accept_ra_defrtr/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_ra_pinfo' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_ra_pinfo
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_ra_pinfo
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.default.accept_ra_pinfo = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.default.accept_ra_pinfo/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_ra_rtr_pref' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_ra_rtr_pref
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_ra_rtr_pref
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.default.accept_ra_rtr_pref = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.default.accept_ra_rtr_pref/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_redirects' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_redirects
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_redirects
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.default.accept_redirects = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.default.accept_redirects/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_source_route' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_source_route
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_accept_source_route
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.default.accept_source_route = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.default.accept_source_route/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_autoconf' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_autoconf
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_autoconf
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.default.autoconf = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.default.autoconf/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_forwarding' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_forwarding
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_forwarding
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.default.forwarding = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.default.forwarding/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_max_addresses' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_max_addresses
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_max_addresses
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.default.max_addresses = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.default.max_addresses/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_router_solicitations' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_router_solicitations
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_default_router_solicitations
@@ -40,7 +40,7 @@
 #	else, add "net.ipv6.conf.default.router_solicitations = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv6.conf.default.router_solicitations/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_accept_local' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_accept_local
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_accept_local
@@ -38,7 +38,7 @@
 #	else, add "net.ipv4.conf.all.accept_local = 0" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.all.accept_local/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_accept_redirects' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_accept_redirects
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_accept_redirects
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.all.accept_redirects = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.all.accept_redirects/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_accept_source_route' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_accept_source_route
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_accept_source_route
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.all.accept_source_route = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.all.accept_source_route/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_arp_filter' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_arp_filter
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_arp_filter
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.all.arp_filter = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.all.arp_filter/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_arp_ignore' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_arp_ignore
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_arp_ignore
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.all.arp_ignore = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.all.arp_ignore/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_drop_gratuitous_arp' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_drop_gratuitous_arp
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_drop_gratuitous_arp
@@ -38,7 +38,7 @@
 #	else, add "net.ipv4.conf.all.drop_gratuitous_arp = 1" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.all.drop_gratuitous_arp/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_forwarding' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_forwarding
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_forwarding
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.all.forwarding = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.all.forwarding/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_log_martians' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_log_martians
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_log_martians
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.all.log_martians = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.all.log_martians/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_route_localnet' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_route_localnet
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_route_localnet
@@ -38,7 +38,7 @@
 #	else, add "net.ipv4.conf.all.route_localnet = 0" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.all.route_localnet/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_rp_filter' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_rp_filter
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_rp_filter
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.all.rp_filter = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.all.rp_filter/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_secure_redirects' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_secure_redirects
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_secure_redirects
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.all.secure_redirects = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.all.secure_redirects/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_shared_media' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_shared_media
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_shared_media
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.all.shared_media = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.all.shared_media/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_accept_redirects' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_accept_redirects
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_accept_redirects
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.default.accept_redirects = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.default.accept_redirects/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_accept_source_route' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_accept_source_route
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_accept_source_route
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.default.accept_source_route = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.default.accept_source_route/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_forwarding' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_forwarding
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_forwarding
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.default.forwarding = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.default.forwarding/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_log_martians' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_log_martians
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_log_martians
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.default.log_martians = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.default.log_martians/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_rp_filter' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_rp_filter
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_rp_filter
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.default.rp_filter = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.default.rp_filter/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_secure_redirects' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_secure_redirects
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_secure_redirects
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.default.secure_redirects = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.default.secure_redirects/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_shared_media' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_shared_media
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_shared_media
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.conf.default.shared_media = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.default.shared_media/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_icmp_echo_ignore_broadcasts' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_icmp_echo_ignore_broadcasts
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_icmp_echo_ignore_broadcasts
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.icmp_echo_ignore_broadcasts = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.icmp_echo_ignore_broadcasts/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_icmp_ignore_bogus_error_responses' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_icmp_ignore_bogus_error_responses
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_icmp_ignore_bogus_error_responses
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.icmp_ignore_bogus_error_responses = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.icmp_ignore_bogus_error_responses/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_ip_local_port_range' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_ip_local_port_range
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_ip_local_port_range
@@ -38,7 +38,7 @@
 #	else, add "net.ipv4.ip_local_port_range = 32768 65535" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.ip_local_port_range/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_tcp_invalid_ratelimit' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_tcp_invalid_ratelimit
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_tcp_invalid_ratelimit
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.tcp_invalid_ratelimit = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.tcp_invalid_ratelimit/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_tcp_rfc1337' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_tcp_rfc1337
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_tcp_rfc1337
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.tcp_rfc1337 = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.tcp_rfc1337/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_tcp_syncookies' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_tcp_syncookies
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_tcp_syncookies
@@ -40,7 +40,7 @@
 #	else, add "net.ipv4.tcp_syncookies = value" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.tcp_syncookies/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_send_redirects' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_send_redirects
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_send_redirects
@@ -38,7 +38,7 @@
 #	else, add "net.ipv4.conf.all.send_redirects = 0" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.all.send_redirects/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_send_redirects' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_send_redirects
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_send_redirects
@@ -38,7 +38,7 @@
 #	else, add "net.ipv4.conf.default.send_redirects = 0" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.conf.default.send_redirects/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_ip_forward' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_ip_forward
+++ xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_ip_forward
@@ -38,7 +38,7 @@
 #	else, add "net.ipv4.ip_forward = 0" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.ipv4.ip_forward/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_fs_protected_hardlinks' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_fs_protected_hardlinks
+++ xccdf_org.ssgproject.content_rule_sysctl_fs_protected_hardlinks
@@ -38,7 +38,7 @@
 #	else, add "fs.protected_hardlinks = 1" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^fs.protected_hardlinks/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_fs_protected_symlinks' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_fs_protected_symlinks
+++ xccdf_org.ssgproject.content_rule_sysctl_fs_protected_symlinks
@@ -38,7 +38,7 @@
 #	else, add "fs.protected_symlinks = 1" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^fs.protected_symlinks/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_core_pattern' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_core_pattern
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_core_pattern
@@ -38,7 +38,7 @@
 #	else, add "kernel.core_pattern = |/bin/false" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.core_pattern/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_core_uses_pid' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_core_uses_pid
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_core_uses_pid
@@ -38,7 +38,7 @@
 #	else, add "kernel.core_uses_pid = 0" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.core_uses_pid/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict
@@ -38,7 +38,7 @@
 #	else, add "kernel.dmesg_restrict = 1" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.dmesg_restrict/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_kexec_load_disabled' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_kexec_load_disabled
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_kexec_load_disabled
@@ -38,7 +38,7 @@
 #	else, add "kernel.kexec_load_disabled = 1" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.kexec_load_disabled/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_panic_on_oops' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_panic_on_oops
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_panic_on_oops
@@ -38,7 +38,7 @@
 #	else, add "kernel.panic_on_oops = 1" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.panic_on_oops/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_perf_cpu_time_max_percent' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_perf_cpu_time_max_percent
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_perf_cpu_time_max_percent
@@ -38,7 +38,7 @@
 #	else, add "kernel.perf_cpu_time_max_percent = 1" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.perf_cpu_time_max_percent/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_perf_event_max_sample_rate' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_perf_event_max_sample_rate
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_perf_event_max_sample_rate
@@ -38,7 +38,7 @@
 #	else, add "kernel.perf_event_max_sample_rate = 1" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.perf_event_max_sample_rate/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_perf_event_paranoid' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_perf_event_paranoid
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_perf_event_paranoid
@@ -38,7 +38,7 @@
 #	else, add "kernel.perf_event_paranoid = 2" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.perf_event_paranoid/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_pid_max' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_pid_max
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_pid_max
@@ -38,7 +38,7 @@
 #	else, add "kernel.pid_max = 65536" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.pid_max/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_sysrq' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_sysrq
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_sysrq
@@ -38,7 +38,7 @@
 #	else, add "kernel.sysrq = 0" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.sysrq/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_unprivileged_bpf_disabled' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_unprivileged_bpf_disabled
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_unprivileged_bpf_disabled
@@ -38,7 +38,7 @@
 #	else, add "kernel.unprivileged_bpf_disabled = 1" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.unprivileged_bpf_disabled/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope
@@ -38,7 +38,7 @@
 #	else, add "kernel.yama.ptrace_scope = 1" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.yama.ptrace_scope/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_net_core_bpf_jit_harden' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_net_core_bpf_jit_harden
+++ xccdf_org.ssgproject.content_rule_sysctl_net_core_bpf_jit_harden
@@ -38,7 +38,7 @@
 #	else, add "net.core.bpf_jit_harden = 2" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^net.core.bpf_jit_harden/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_user_max_user_namespaces' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_user_max_user_namespaces
+++ xccdf_org.ssgproject.content_rule_sysctl_user_max_user_namespaces
@@ -38,7 +38,7 @@
 #	else, add "user.max_user_namespaces = 0" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^user.max_user_namespaces/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_vm_mmap_min_addr' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_vm_mmap_min_addr
+++ xccdf_org.ssgproject.content_rule_sysctl_vm_mmap_min_addr
@@ -38,7 +38,7 @@
 #	else, add "vm.mmap_min_addr = 65536" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^vm.mmap_min_addr/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable
+++ xccdf_org.ssgproject.content_rule_sysctl_fs_suid_dumpable
@@ -38,7 +38,7 @@
 #	else, add "fs.suid_dumpable = 0" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^fs.suid_dumpable/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_kptr_restrict' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_kptr_restrict
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_kptr_restrict
@@ -38,7 +38,7 @@
 #	else, add "kernel.kptr_restrict = 1" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.kptr_restrict/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space' differs.
--- xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space
+++ xccdf_org.ssgproject.content_rule_sysctl_kernel_randomize_va_space
@@ -38,7 +38,7 @@
 #	else, add "kernel.randomize_va_space = 2" to /etc/sysctl.conf
 #
 
-sed -i "/^$SYSCONFIG_VAR/d" /etc/sysctl.conf
+sed -i "/^kernel.randomize_va_space/d" /etc/sysctl.conf
 
 # Strip any search characters in the key arg so that the key can be replaced without
 # adding any search characters to the config file.

[openshift-ci]

@Mab879: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-aws-openshift-platform-compliance	6da5739	link	true	/test e2e-aws-openshift-platform-compliance

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.