 +<select idref="set_sysctl_net_ipv4_conf_default_rp_filter" selected="true"/>
 +
 +<!-- DCID Chapters: dcid="4.B.2.a(19)(a), 4.B.4.a(26)(a), 4.B.1.a(8)(a), 4.B.3.a(22)(a), 4.B.5.a(26)(a), 8.B.8.d, 4.B.3.a(1)(b), 4.B.1.a(1)(b), 4.B.2.a(1)(b), 4.B.5.a(1)(b), 4.B.4.a(1)(b)" -->
-+<select idref="install_openswan" selected="true"/>
++<!-- TO BE DONE MANUALLY
++<select idref="install_openswan" selected="true"/>-->
 +
 +<!-- DCID Chapters: dcid="4.B.3.a(12), 4.B.5.a(17), 4.B.2.a(10), 7.D.2.b, 4.B.4.a(17)" -->
 +<select idref="disable_ipv6_module_loading" selected="true"/>
 +
 +<!-- DCID Chapters: dcid="4.B.3.a(12), 4.B.5.a(17), 4.B.2.a(10), 7.D.2.b, 4.B.4.a(17)" -->
-+<select idref="network_ipv6_disable_interfaces" selected="true"/>
++<!-- TO BE DONE MANUALLY
++<select idref="network_ipv6_disable_interfaces" selected="true"/>-->
 +
 +<!-- DCID Chapters: dcid="4.B.3.a(12), 4.B.5.a(17), 4.B.2.a(10), 7.D.2.b, 4.B.4.a(17)" -->
 +<select idref="network_ipv6_disable_rpc" selected="true"/>

+<select idref="set_selinux_state" selected="true"/>
+
+<!-- DCID Chapters: dcid="4.B.3.a(12), 4.B.5.a(17), 4.B.2.a(10), 7.D.2.b, 4.B.4.a(17)" -->
+<select idref="set_selinux_policy" selected="true"/>
+
+<!-- DCID Chapters: dcid="4.B.5.a(3), 4.B.4.a(3)" -->
+<select idref="service_restorecond_enabled" selected="true"/>

+<select idref="permissions_grub_conf" selected="true"/>
+
+<!-- DCID Chapters: dcid="4.B.5.a(3), 4.B.4.a(3), 4.B.2.a(7), 4.B.4.a(11), 4.B.1.b(3), 4.B.3.a(9), 4.B.5.a(11), 4.B.3.a(12), 4.B.5.a(17), 4.B.2.a(10), 7.D.2.b, 4.B.4.a(17)" -->
+<!-- TO BE DONE MANUALLY
+<select idref="bootloader_password" selected="true"/>-->
+
+<!-- DCID Chapters: dcid="4.B.2.a(7), 4.B.4.a(11), 4.B.1.b(3), 4.B.3.a(9), 4.B.5.a(11), 4.B.3.a(12), 4.B.5.a(17), 4.B.2.a(10), 4.B.4.a(17)" -->
+<select idref="require_singleuser_auth" selected="true"/>
