>From fa312e4de38a3f3379e73f320a4b36c3500d3ea9 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Tue, 24 Apr 2012 13:41:23 -0400 Subject: [PATCH 6/9] Mapped CCI-000172 to both enable_auditd_service and auditd_configure_rules This CCI requires that audit rules both be defined and actually audited, which is met by enforcing both enable_auditd_service auditd_configure_rules --- rhel6/src/input/system/auditing.xml | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/rhel6/src/input/system/auditing.xml b/rhel6/src/input/system/auditing.xml index 05e7a57..7cc41b2 100644 --- a/rhel6/src/input/system/auditing.xml +++ b/rhel6/src/input/system/auditing.xml @@ -78,6 +78,7 @@ default): + @@ -138,6 +139,7 @@ editing as needed, activate the new rules:
# service auditd restart
+ Records Events that Modify Date and Time Information -- 1.7.1