On Jun 27, 2013, at 6:34 PM, Trevor Vaughan <tvaughan@onyxpoint.com> wrote:

From my testing, this appears to catch the execution of all suid/sgit binaries without digging all over the system to figure out what they are. As an added bonus, you get to find out about binaries that pop onto your system for a brief period.

I think you can email your request to the DISA FSO Helpdesk and they review your suggestion and add it to the next version of the STIG.  Here is the address which you can verify on the DISA STIG home page.  When I've emailed them in the past, they take a day or two to respond.

disa.letterkenny.FSO.mbx.stig-customer-support-mailbox@mail.mil

Bryan