[PATCH 4/9] Mapped CCI-000169 to service_auditd_enabled

Shawn Wells shawn at redhat.com
Tue Apr 24 17:33:13 UTC 2012


000169 states the system needs to have the capability to audit, which is met by turning audit on

(note capability to audit doesn't define "what" is audited, hence the mapping to service_auditd_enabled)
---
 rhel6/src/input/system/auditing.xml |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/rhel6/src/input/system/auditing.xml b/rhel6/src/input/system/auditing.xml
index d3116a7..b58f990 100644
--- a/rhel6/src/input/system/auditing.xml
+++ b/rhel6/src/input/system/auditing.xml
@@ -77,6 +77,7 @@ default):
 <ident cce="4292-9" />
 <oval id="service_auditd_enabled" />
 <ref nist="CM-6, CM-7" />
+<ident cci="CCI-000169" />
 </Rule>
 
 <Rule id="enable_auditd_bootloader">
-- 
1.7.1


--h31gzZEtNLTqOjlF--


More information about the scap-security-guide mailing list