DoD refined as requiring audit of allĀ
success/failed attempts to create/access/delete/modify files [2]Ugh... this thing *destroys* systems on a regular basis along with the chmod/chown rules. I get it but I've seen *so* many systems tanked by those rules.
Way the current Configuration Annex is written is that CNSSI 1253
and DoD systems will need to audit every file I/O.
They have a reasonably responsive team behind these. Can open a ticket through GitHub, or even submit a PR, to start the conversation to have these changed:
https://github.com/commoncriteria/operatingsystem/blob/master/input/configannex.xml#L212#L223