[PATCH 12/21] Mapped CCI-001403 to audit_rules_usergroup_modification
Shawn Wells
shawn at redhat.com
Tue Apr 24 19:28:13 UTC 2012
This CCI requires auditing of events which modify users/groups, which is met through our audit_rules_usergroup_modification
---
rhel6/src/input/system/auditing.xml | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/rhel6/src/input/system/auditing.xml b/rhel6/src/input/system/auditing.xml
index a2c8a1f..793b574 100644
--- a/rhel6/src/input/system/auditing.xml
+++ b/rhel6/src/input/system/auditing.xml
@@ -181,6 +181,7 @@ to capture events that modify account changes:
<ident cce="14829-6" />
<oval id="audit_rules_usergroup_modification" />
<ref nist="AU-2(a)" />
+<ident cci="CCI-001403" />
</Rule>
--
1.7.1
--9amGYk9869ThD9tj--
More information about the scap-security-guide
mailing list