DoD refined as requiring audit of all
success/failed attempts to create/access/delete/modify files Ugh... this thing *destroys* systems on a regular basis along with the chmod/chown rules. I get it but I've seen *so* many systems tanked by those rules.
Way the current Configuration Annex is written is that CNSSI 1253
and DoD systems will need to audit every file I/O.
They have a reasonably responsive team behind these. Can open a ticket through GitHub, or even submit a PR, to start the conversation to have these changed: