[PATCH 2/9] Mapped CCI-001338 to auditing group

Shawn Wells shawn at redhat.com
Tue Apr 24 17:13:07 UTC 2012


001338 requires pairing of UIDs to audit events which is natural behavior, not specific to any SCAP rule. Adding to master audit group.
---
 rhel6/src/input/system/auditing.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/system/auditing.xml b/rhel6/src/input/system/auditing.xml
index 6967677..380e799 100644
--- a/rhel6/src/input/system/auditing.xml
+++ b/rhel6/src/input/system/auditing.xml
@@ -63,6 +63,7 @@ data if the system is busy.
 </description>
 <!-- <ident cci="CCI-000120" /> -->
 <!-- <ident cci="CCI-000166" /> -->
+<!-- <ident cci="CCI-001338" /> -->
 
 <Rule id="enable_auditd_service">
 <title>Enable auditd Service</title>
@@ -75,7 +76,6 @@ default):
 <ident cce="4292-9" />
 <oval id="service_auditd_enabled" />
 <ref nist="CM-6, CM-7" />
-<ident cci="CCI-000016, CCI-000166" />
 </Rule>
 
 <Rule id="enable_auditd_bootloader">
-- 
1.7.1


--cNdxnHkX5QqsyA0e--


More information about the scap-security-guide mailing list