[PATCH 02/21] Mapped CCI-001338 to auditing group
Shawn Wells
shawn at redhat.com
Tue Apr 24 17:13:07 UTC 2012
001338 requires pairing of UIDs to audit events which is natural behavior, not specific to any SCAP rule. Adding to master audit group.
---
rhel6/src/input/system/auditing.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/rhel6/src/input/system/auditing.xml b/rhel6/src/input/system/auditing.xml
index 6967677..380e799 100644
--- a/rhel6/src/input/system/auditing.xml
+++ b/rhel6/src/input/system/auditing.xml
@@ -63,6 +63,7 @@ data if the system is busy.
</description>
<!-- <ident cci="CCI-000120" /> -->
<!-- <ident cci="CCI-000166" /> -->
+<!-- <ident cci="CCI-001338" /> -->
<Rule id="enable_auditd_service">
<title>Enable auditd Service</title>
@@ -75,7 +76,6 @@ default):
<ident cce="4292-9" />
<oval id="service_auditd_enabled" />
<ref nist="CM-6, CM-7" />
-<ident cci="CCI-000016, CCI-000166" />
</Rule>
<Rule id="enable_auditd_bootloader">
--
1.7.1
--pWyiEgJYm5f9v55/--
More information about the scap-security-guide
mailing list