>From 5f749302e98dcc520d4518a799788cb935b4e3f0 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Wed, 16 May 2012 15:01:53 -0400 Subject: [PATCH 04/11] Mapped CCI-001684 to audit_account_changes This CCI requires that proper notification is given when accounts are modified. The audit subsystem captures such events and places them in the audit logs for sysadmin review. --- rhel6/src/input/system/auditing.xml | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/rhel6/src/input/system/auditing.xml b/rhel6/src/input/system/auditing.xml index cd23bee..8b9ecd4 100644 --- a/rhel6/src/input/system/auditing.xml +++ b/rhel6/src/input/system/auditing.xml @@ -237,7 +237,7 @@ to capture events that modify account changes: In addition to auditing new user and group accounts, these watches will alert the system administrator(s) to any modifications. It is recommended that any unexpected users, groups, or modifications be investigated for legitimacy. - + -- 1.7.1