[PATCH 14/21] Mapped CCI-001405 to audit_account_changes
Shawn Wells
shawn at redhat.com
Tue Apr 24 19:33:55 UTC 2012
This CCI requires auditing account termination, which is met through audit_account_changes
---
rhel6/src/input/system/auditing.xml | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/rhel6/src/input/system/auditing.xml b/rhel6/src/input/system/auditing.xml
index 6e17e8a..1c6db7a 100644
--- a/rhel6/src/input/system/auditing.xml
+++ b/rhel6/src/input/system/auditing.xml
@@ -183,6 +183,7 @@ to capture events that modify account changes:
<ref nist="AU-2(a)" />
<ident cci="CCI-001403" />
<ident cci="CCI-001404" />
+<ident cci="CCI-001405" />
</Rule>
--
1.7.1
--45Z9DzgjV8m4Oswq--
More information about the scap-security-guide
mailing list