>From cadc025fd840ad2b2d45c014e2298e9c5e177c86 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Tue, 21 Feb 2012 22:01:32 -0500 Subject: [PATCH 04/11] Minor changes to audit_account_changes# --- rhel6/src/input/system/auditing.xml | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/rhel6/src/input/system/auditing.xml b/rhel6/src/input/system/auditing.xml index 23d22c5..5b3a74b 100644 --- a/rhel6/src/input/system/auditing.xml +++ b/rhel6/src/input/system/auditing.xml @@ -174,7 +174,7 @@ upon an accurate system time (such as sshd). All changes to the system time shou Add the following to /etc/audit/audit.rules, in order to capture events that modify account changes:
-
#audit_account_changes
+
# audit_account_changes
 -w /etc/group -p wa -k audit_account_changes
 -w /etc/passwd -p wa -k audit_account_changes
 -w /etc/gshadow -p wa -k audit_account_changes
-- 
1.7.1