>From a13b2696b62f7100258dbf0eaa5a263959c38889 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Tue, 24 Apr 2012 13:36:08 -0400 Subject: [PATCH 5/9] Mapped CCI-000171 to auditd_configure_rules CCI-000171 "selects which auditable events are audited", which is met through the auditd_configure_rules group --- rhel6/src/input/system/auditing.xml | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/rhel6/src/input/system/auditing.xml b/rhel6/src/input/system/auditing.xml index b58f990..05e7a57 100644 --- a/rhel6/src/input/system/auditing.xml +++ b/rhel6/src/input/system/auditing.xml @@ -137,6 +137,7 @@ After reviewing all the rules, reading the following sections, and editing as needed, activate the new rules:
# service auditd restart
+ Records Events that Modify Date and Time Information -- 1.7.1