Preupgrade Assistant analysis report

with profile Preupgrade Assistant default profile

This profile is designed for the Preupgrade Assistant tool.

This report lists results of a set of checks that have been performed on a system. Please go through the results and act according to the recommendations if given.

This report has been automatically generated.

Evaluation Characteristics

Target machinegw
Benchmark URL/root/preupgrade/AL1_AL2/all-xccdf.xml
Benchmark IDxccdf_preupg-content_benchmark_all
Profile IDxccdf_preupg_profile_default
Started at2022-05-04T13:56:05
Finished at2022-05-04T13:56:15
Performed byrweltman

Addresses

  • IPv4  127.0.0.1
  • IPv4  172.31.46.93
  • IPv6  0:0:0:0:0:0:0:1
  • IPv6  fe80:0:0:0:3:91ff:fe7a:b6b5
  • MAC  00:00:00:00:00:00
  • MAC  02:03:91:7A:B6:B5

Compliance and Scoring

There were no failed or uncertain rules. It seems that no action is necessary.

Rule results

0 passed
3 informational
0 fixed
0 needs_action
1 needs_inspection
0 failed
4 other

Severity of failed rules

0 other
0 low
0 medium
0 high

Score

Scoring systemScoreMaximumPercent
urn:xccdf:scoring:default0.000000100.000000
0%
urn:xccdf:scoring:flat0.0000001.000000
0%

Rule Overview

Group rules by:
TitleSeverityResult
Preupgrade Assistant analysis report
Grub 2
Grub 2
notapplicable
mysql to mariadb
mysql to mariadb
notapplicable
Extras provide packages
Extras provide packages
informational
Python Native Packages
Python Native Packages
needs_inspection
Release Lock
Release Lock
informational
SoName drift
SoName drift
informational

Result Details

Grub 2xccdf_preupg_rule_grub2_check

Grub 2

Rule IDxccdf_preupg_rule_grub2_check
Result
notapplicable
Time2022-05-04T13:56:05
Severity
Identifiers and References
Description

Notice of the inevitability of moving to grub2

File(s) affected:

  • /boot/grub/menu.lst

Logs
preupg.log.INFO: Package grub is not installed or it is not signed by Red Hat.
mysql to mariadbxccdf_preupg_rule_mariadb_check

mysql to mariadb

Rule IDxccdf_preupg_rule_mariadb_check
Result
notapplicable
Time2022-05-04T13:56:05
Severity
Identifiers and References
Description

MariaDB succeeds MySQL

Logs
preupg.log.INFO: Package mysql is not installed or it is not signed by Red Hat.
Extras provide packagesxccdf_preupg_rule_move-to-extras_check

Extras provide packages

Rule IDxccdf_preupg_rule_move-to-extras_check
Result
informational
Time2022-05-04T13:56:06
Severity
Identifiers and References
Description

Software you use might be best found in Amazon Linux Extras

Remediation description:
Amazon Linux 2 provides some software in a more limited-support, but updated
more-frequently source of software, called Extras. Some of the software you
have installed here can be found in Amazon Linux Extras when you move to 2.

In particular, packages
vim-filesystem-8.2.4621-1.1.amzn1.noarch
vim-data-8.2.4621-1.1.amzn1.noarch
php73-common-7.3.30-1.31.amzn1.x86_64
vim-enhanced-8.2.4621-1.1.amzn1.x86_64
emacs-24.3-20.22.amzn1.x86_64
php73-xml-7.3.30-1.31.amzn1.x86_64
php73-json-7.3.30-1.31.amzn1.x86_64
php73-gd-7.3.30-1.31.amzn1.x86_64
php73-mysqlnd-7.3.30-1.31.amzn1.x86_64
php73-xmlrpc-7.3.30-1.31.amzn1.x86_64
vim-minimal-8.2.4621-1.1.amzn1.x86_64
php73-process-7.3.30-1.31.amzn1.x86_64
php73-7.3.30-1.31.amzn1.x86_64
nano-2.5.3-1.19.amzn1.x86_64
php73-cli-7.3.30-1.31.amzn1.x86_64
vim-common-8.2.4621-1.1.amzn1.x86_64
postgresql92-libs-9.2.24-3.67.amzn1.x86_64
emacs-common-24.3-20.22.amzn1.x86_64
php73-pdo-7.3.30-1.31.amzn1.x86_64
Python Native Packagesxccdf_preupg_rule_python_check

Python Native Packages

Rule IDxccdf_preupg_rule_python_check
Result
needs_inspection
Time2022-05-04T13:56:15
Severity
Identifiers and References
Description

Checks for non native python packages on your system.

Logs
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/Pygments-1.4.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/SOAPpy is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/argparse-1.2.1.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/backports is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/backports is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/backports.ssl_match_hostname-3.4.0.2.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/boto is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/boto-2.48.0.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/botocore is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/botocore-1.12.92.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/certifi is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/chardet is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/colorama is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/daemon is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/dateutil is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/docutils is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/ecdsa is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/iniparse is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/jmespath is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/jmespath-0.9.2.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/kitchen is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/kitchen-1.1.1.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/markdown is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/paramiko is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/paramiko-1.15.1.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/pkg_resources is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/ply is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/pyasn1 is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/pyasn1-0.1.7.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/pygments is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/pystache is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/pystache-0.5.3.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/python_daemon-1.5.2.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/python_dateutil-2.1.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/requests is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/requests-1.2.3.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/rpmUtils is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/rsa is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/rsa-3.4.1.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/setuptools is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/setuptools-36.2.7.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/six-1.8.0.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/urlgrabber is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/urllib3 is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/urllib3-1.24.1.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/yum is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.6/dist-packages/zope is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/Babel-0.9.4.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/Jinja2-2.7.2.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/awscli is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/awscli-1.18.107.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/babel is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/backports is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/backports is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/backports.ssl_match_hostname-3.4.0.2.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/botocore is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/botocore-1.17.31.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.log.INFO: Python directory in dist-packages /usr/lib/python2.7/dist-packages/cfnbootstrap is not owned by an RPM package.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/chardet is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/cloud_init-0.7.6.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/cloudinit is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/colorama is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/concurrent is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/daemon is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/dateutil is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/dns is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/docutils is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/futures-3.0.3.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/iniparse is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/jinja2 is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/jmespath is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/jmespath-0.9.2.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/jsonpatch-1.2.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/kitchen is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/kitchen-1.1.1.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.log.INFO: Python directory in dist-packages /usr/lib/python2.7/dist-packages/oscap_docker_python is not owned by an RPM package.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/pkg_resources is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/ply is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/preupg is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/preupgrade_assistant-2.6.0.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/pyasn1 is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/pyasn1-0.1.7.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/pykickstart is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/pystache is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/pystache-0.5.3.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/python_daemon-1.5.2.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/python_dateutil-2.1.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/requests is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/requests-1.2.3.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/rpmUtils is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/rsa is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/rsa-3.4.1.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/setuptools is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/setuptools-36.2.7.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/six-1.8.0.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/urlgrabber is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/urllib3 is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/urllib3-1.24.3.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/yum is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python2.7/dist-packages/yumutils is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python3.4/dist-packages/__pycache__ is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python3.4/dist-packages/__pycache__ is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python3.4/dist-packages/pip is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python3.4/dist-packages/pip-9.0.3.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python3.4/dist-packages/pkg_resources is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python3.4/dist-packages/setuptools is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib/python3.4/dist-packages/setuptools-36.2.7.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/Cheetah is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/Cheetah-2.4.4.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/Crypto is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/M2Crypto is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/M2Crypto-0.21.1.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/OpenSSL is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/PIL is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/backports is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/curl is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/gpgme is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/openmpi is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/pyliblzma-0.5.3.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/rpm is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/simplejson is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/simplejson-3.6.5.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/twisted is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/yaml is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/zope is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/zope is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.6/dist-packages/zope.interface-3.5.2.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.7/dist-packages/MarkupSafe-0.11.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.7/dist-packages/PIL is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.7/dist-packages/backports is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.7/dist-packages/curl is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.7/dist-packages/gpgme is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.7/dist-packages/markupsafe is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.7/dist-packages/pyliblzma-0.5.3.egg-info is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.7/dist-packages/rpm is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python2.7/dist-packages/yaml is owned by an RPM package that was not GPG signed by AL.
preupg.risk.SLIGHT: Python directory /usr/lib64/python3.4/dist-packages/__pycache__ is owned by an RPM package that was not GPG signed by AL.
Remediation description:
Directories showing up in Python's installation path, /usr/lib/python*/dist-packages, will not be owned by an RPM if they were installed using pip or other non-OS specific methods.

Be aware that any RPM owned python packages which are not signed by Amazon Linux will need to be manually reinstalled on your new system.

In addition, the python installation directory on Amazon Linux 2 has moved from /usr/lib/python*/dist-packages to the more traditional /usr/lib/python*/site-packages directory.
Release Lockxccdf_preupg_rule_releasever-lock_check

Release Lock

Rule IDxccdf_preupg_rule_releasever-lock_check
Result
informational
Time2022-05-04T13:56:15
Severity
Identifiers and References
Description

Software locked to a version might not work in AL2

Remediation description:
Amazon Linux 2's LTS commitment is 5 years of ABI compatibility in the core
repository from the date of inital launch. This differs from the original Amazon
Linux AMI's rolling release model in which locking to a specific release
version, like 2018.03, was the main approach for this.
SoName driftxccdf_preupg_rule_sonames_check

SoName drift

Rule IDxccdf_preupg_rule_sonames_check
Result
informational
Time2022-05-04T13:56:15
Severity
Identifiers and References
Description

Dynamic linker might not know of older Shared Object names

Remediation description:
Many major software version bumps have been made between Amazon Linux 2018.03
and Amazon Linux 2. This will necessarily include changes to which shared object
files are provided and indicates a general lack of compatibility between the two
operating systems. Users will need to verify whether or not this affect their
application.