[PATCH 20/21] Mapped CCI-000154 to enable_auditd_service

Shawn Wells shawn at redhat.com
Tue Apr 24 21:12:54 UTC 2012


"Operating system must support the capability to centralize the review and analysis of audit records from multiple components within the system."

Provided when auditd is installed and enabled (arguably you don't need to "enable" auditd to have this capability, only install it, but this seemed a logical place to put the CCI)
---
 rhel6/src/input/system/auditing.xml |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/rhel6/src/input/system/auditing.xml b/rhel6/src/input/system/auditing.xml
index 807cf53..7c7f54f 100644
--- a/rhel6/src/input/system/auditing.xml
+++ b/rhel6/src/input/system/auditing.xml
@@ -85,6 +85,7 @@ default):
 <ident cci="CCI-001487" />
 <ident cci="CCI-001115" />
 <ident cci="CCI-001454" />
+<ident cci="CCI-000154" />
 </Rule>
 
 <Rule id="enable_auditd_bootloader">
-- 
1.7.1


--DocE+STaALJfprDB--


More information about the scap-security-guide mailing list