On 11/2/12 12:25 AM, Michele Newman wrote:
---
RHEL6/input/system/auditing.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/RHEL6/input/system/auditing.xml b/RHEL6/input/system/auditing.xml
index 832c760..36a3972 100644
--- a/RHEL6/input/system/auditing.xml
+++ b/RHEL6/input/system/auditing.xml
@@ -1204,7 +1204,7 @@ appropriate for your system:
</description>
<ocil clause="there is not output">
To verify that auditing is configured for all media exportation events, run the
following command:
-<pre># grep mount /etc/audit/audit.rules</pre>
+<pre># auditctl -l | grep syscall | grep mount</pre>
</ocil>
<rationale>The unauthorized exportation of data to external media could result in
an information leak
where classified information, Privacy Act information, and intellectual property could
be lost. An audit
-- 1.8.0
Ack