From shawn at redhat.com Thu Aug 20 11:31:01 2015 Content-Type: multipart/mixed; boundary="===============4530772586590787382==" MIME-Version: 1.0 From: Shawn Wells To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH 10/17] Mapped CCI-001589 to auditd_configure_rules Date: Tue, 01 May 2012 20:21:04 -0400 Message-ID: <4FA07DF0.2070301@redhat.com> In-Reply-To: 1335914343-22781-11-git-send-email-wsantos@redhat.com --===============4530772586590787382== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 5/1/12 7:18 PM, Willy Santos wrote: > CCI-001589 requires the tracking of unauthorized, security-relevant confi= guration changes. auditd provides the mechanism for the tracking of such ev= ents. > > Signed-off-by: Willy Santos > --- > rhel6/src/input/system/auditing.xml | 2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > > diff --git a/rhel6/src/input/system/auditing.xml b/rhel6/src/input/system= /auditing.xml > index 5b0ceb4..c79471f 100644 > --- a/rhel6/src/input/system/auditing.xml > +++ b/rhel6/src/input/system/auditing.xml > @@ -133,7 +133,7 @@ After reviewing all the rules, reading the following = sections, and > editing as needed, activate the new rules: >
# service auditd restart
> > - > + > > > Records Events that Modify Date and Time Information Ack --===============4530772586590787382==--