February 2012 Archives by subject
Starting: Mon Feb 6 16:05:21 UTC 2012
Ending: Wed Feb 29 18:49:31 UTC 2012
Messages: 86
- [1/1] 0001-22-FEB-2012-shawn-redhat.com.patch
Shawn Wells
- [1/1] 0001-22-FEB-2012-shawn-redhat.com.patch
Shawn Wells
- [PATCH 01/11] 22-FEB-2012 Updated to include NIST 800-53 sub-section number
Shawn Wells
- [PATCH 01/11] 22-FEB-2012 Updated to include NIST 800-53 sub-section number
Shawn Wells
- [PATCH 01/24] 22-FEB-2012 Updated to include NIST 800-53 sub-section number
Shawn Wells
- [PATCH 01/24] 22-FEB-2012 Updated to include NIST 800-53 sub-section number
Shawn Wells
- [PATCH 02/11] - Updated audit_time_rules to reflect different audit rules for 32 & 64bit systems.
Shawn Wells
- [PATCH 02/11] - Updated audit_time_rules to reflect different audit rules for 32 & 64bit systems. - Changed key to audit_time_rules to match rule ID
Shawn Wells
- [PATCH 02/24] - Updated audit_time_rules to reflect different audit rules for 32 & 64bit systems.
Shawn Wells
- [PATCH 02/24] - Updated audit_time_rules to reflect different audit rules for 32 & 64bit systems. - Changed key to audit_time_rules to match rule ID
Shawn Wells
- [PATCH 03/11] - Updated audit_account_changes to reflect 800-53 subsection
Shawn Wells
- [PATCH 03/11] - Updated audit_account_changes to reflect 800-53 subsection - Adjusted audit rules key to -k audit_account_changes - Altered rationale
Shawn Wells
- [PATCH 03/24] - Updated audit_account_changes to reflect 800-53 subsection
Shawn Wells
- [PATCH 03/24] - Updated audit_account_changes to reflect 800-53 subsection - Adjusted audit rules key to -k audit_account_changes - Altered rationale
Shawn Wells
- [PATCH 04/11] Minor changes to audit_account_changes
Shawn Wells
- [PATCH 04/11] Minor changes to audit_account_changes#
Shawn Wells
- [PATCH 04/24] Minor changes to audit_account_changes#
Shawn Wells
- [PATCH 04/24] Minor changes to audit_account_changes#
Shawn Wells
- [PATCH 05/11] Updated audit_network_modifications, specifically changed the -k to audit_network_modifications
Shawn Wells
- [PATCH 05/11] Updated audit_network_modifications, specifically changed the -k to audit_network_modifications
Shawn Wells
- [PATCH 05/24] Updated audit_network_modifications, specifically changed the -k to audit_network_modifications
Shawn Wells
- [PATCH 05/24] Updated audit_network_modifications, specifically changed the -k to audit_network_modifications
Shawn Wells
- [PATCH 06/11] - Updated -k to audit_mac_changes
Shawn Wells
- [PATCH 06/11] - Updated -k to audit_mac_changes - Included 800-53 subsection
Shawn Wells
- [PATCH 06/24] - Updated -k to audit_mac_changes
Shawn Wells
- [PATCH 06/24] - Updated -k to audit_mac_changes - Included 800-53 subsection
Shawn Wells
- [PATCH 07/11] - Updated audit_dac_actions, changed -k to audit_dac_actions, - Formating fixes
Shawn Wells
- [PATCH 07/11] - Updated audit_dac_actions, changed -k to audit_dac_actions - Formating fixes
Shawn Wells
- [PATCH 07/24] - Updated audit_dac_actions, changed -k to audit_dac_actions
Shawn Wells
- [PATCH 07/24] - Updated audit_dac_actions, changed -k to audit_dac_actions - Formating fixes
Shawn Wells
- [PATCH 08/11] - Updated audit_unsuccessful_file_access for syntax, chanced -k to audit_unsuccessful_file_access
Shawn Wells
- [PATCH 08/11] - Updated audit_unsuccessful_file_access for syntax, chanced -k to audit_unsuccessful_file_access
Shawn Wells
- [PATCH 08/24] - Updated audit_unsuccessful_file_access for syntax, chanced -k to audit_unsuccessful_file_access
Shawn Wells
- [PATCH 08/24] - Updated audit_unsuccessful_file_access for syntax, chanced -k to audit_unsuccessful_file_access
Shawn Wells
- [PATCH 09/11] - Updated 800-53 paragraph - Included sample script to pull all priv. commands - Included output from default RHEL6 install
Shawn Wells
- [PATCH 09/11] - Updated 800-53 paragraph, - Included sample script to pull all priv. commands, - Included output from default RHEL6 install
Shawn Wells
- [PATCH 09/24] - Updated 800-53 paragraph
Shawn Wells
- [PATCH 09/24] - Updated 800-53 paragraph - Included sample script to pull all priv. commands - Included output from default RHEL6 install
Shawn Wells
- [PATCH 1/3] Added two additional ldap checks, renamed one check to better differentiate same attrib. checks
Kevin Spargur
- [PATCH 10/11] - Updated key (-k audit_kernel_module_loading) - Minor content/syntax adjustments
Shawn Wells
- [PATCH 10/11] - Updated key (-k audit_kernel_module_loading), - Minor content/syntax adjustments
Shawn Wells
- [PATCH 10/24] - Updated key (-k audit_kernel_module_loading)
Shawn Wells
- [PATCH 10/24] - Updated key (-k audit_kernel_module_loading) - Minor content/syntax adjustments
Shawn Wells
- [PATCH 11/11] - Minor changes to audit_config_immutable
Shawn Wells
- [PATCH 11/11] - Minor changes to audit_config_immutable
Shawn Wells
- [PATCH 11/24] - Minor changes to audit_config_immutable
Shawn Wells
- [PATCH 11/24] - Minor changes to audit_config_immutable
Shawn Wells
- [PATCH 12/24] Added section audit_data_accesses
Shawn Wells
- [PATCH 12/24] Added section audit_data_accesses - Added rules to monitor the /var/log/audit/ directory for access attempts (successful and unsuccessful) - Added to meet Common Criteria FAU_SAR.1, FAU_SAR.2, FMT_MTD.1
Shawn Wells
- [PATCH 13/24] Created audit_auditd_modifications Section
Shawn Wells
- [PATCH 13/24] Created audit_auditd_modifications Section - Attempts to modify auditd configuration during runtime need to be audited per Common Criteria sections FAU_SEL.1 and FMT_MTD.1
Shawn Wells
- [PATCH 14/24] Altered audit_dac_actions for fchown32, chown32, and lchown32 on 32-bit systems
Shawn Wells
- [PATCH 14/24] Altered audit_dac_actions for fchown32, chown32, and lchown32 on 32-bit systems
Shawn Wells
- [PATCH 15/24] Fixed audit_dac_actions 32bit patch
Shawn Wells
- [PATCH 15/24] Fixed audit_dac_actions 32bit patch
Shawn Wells
- [PATCH 16/24] Created audit_login_config
Shawn Wells
- [PATCH 16/24] Created audit_login_config Added rules to monitor the modification to the login configuration of a user
Shawn Wells
- [PATCH 17/24] Modified audit_network_modifications to watch /etc/sysconfig/network-scripts/ directory
Shawn Wells
- [PATCH 17/24] Modified audit_network_modifications to watch /etc/sysconfig/network-scripts/ directory - Modified audit_network_modifications to watch /etc/sysconfig/network-scripts/ directory - Updated audit_rules_networkconfig_modification.xml for the check as well
Shawn Wells
- [PATCH 18/24] Created audit_system_startup_scripts
Shawn Wells
- [PATCH 18/24] Created audit_system_startup_scripts - Need to monitor the system startup process, which would be through init
Shawn Wells
- [PATCH 19/24] Added a check for /etc/modprobe.d/ to audit_kernel_module_loading
Shawn Wells
- [PATCH 19/24] Added a check for /etc/modprobe.d/ to audit_kernel_module_loading The modprobe.d directory should be watched as well, not just the binary
Shawn Wells
- [PATCH 2/3] Added two ldap checks and updated ldap services doc w/ controls
Kevin Spargur
- [PATCH 20/24] Updated audit_sysadmin_actions to watch /etc/sudoers.d/
Shawn Wells
- [PATCH 20/24] Updated audit_sysadmin_actions to watch /etc/sudoers.d/
Shawn Wells
- [PATCH 21/24] Created audit_sysctl_parameters
Shawn Wells
- [PATCH 21/24] Created audit_sysctl_parameters Created audit_sysctl_parameters to audit sysctl changes Need to create matching cce
Shawn Wells
- [PATCH 22/24] Updated audit_login_config to include PAM config
Shawn Wells
- [PATCH 22/24] Updated audit_login_config to include PAM config - Updated audit_login_config to include PAM configuration files
Shawn Wells
- [PATCH 23/24] Updated audit_dac_actions to watch umask settings
Shawn Wells
- [PATCH 23/24] Updated audit_dac_actions to watch umask settings - Updated audit_dac_actions to watch for umask settings - Also updated audit_rules_dac_modification.xml for the check
Shawn Wells
- [PATCH 24/24] Updated audit_file_deletions to include linking and rename events
Shawn Wells
- [PATCH 24/24] Updated audit_file_deletions to include linking and rename events Created object_audit_rules_file_link_symlink_events in audit_rules_file_deletion_events.xml to perform the check
Shawn Wells
- [PATCH 3/3] Minor formatting fix services/ldap for cleaner guide
Kevin Spargur
- [PATCH] 22-FEB-2012 shawn at redhat.com - Updated rhel6/src/input/system/auditing.xml to include additional DCID 6/3 and ICD checks
Shawn Wells
- Embarrassing question: SSH keys for commits
Shawn Wells
- Embarrassing question: SSH keys for commits
Kevin Spargur
- Embarrassing question: SSH keys for commits
Shawn Wells
- NIST requirement mapping question
Jeffrey Blank
- RFC: "-F auid>=500 -F auid!=4294967295" in audit rules
Shawn Wells
- RFC: "-F auid>=500 -F auid!=4294967295" in audit rules
Steve Grubb
- RFC: -k field value
Shawn Wells
- RFC: -k field value
Michael Moseley
- RFC: -k field value
Steve Grubb
- test - please ignore!
shawn.d.wells at gmail.com
Last message date:
Wed Feb 29 18:49:31 UTC 2012
Archived on: Wed Feb 29 18:49:48 UTC 2012
This archive was generated by
Pipermail 0.09 (Mailman edition).