[PATCH 07/11] Updated policy mappings for audit_file_access

Shawn Wells shawn at redhat.com
Wed Jul 4 06:01:19 UTC 2012


Mapped to CCI-000126, AU-2.1(v), and AU-2 d
---
 rhel6/src/input/system/auditing.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/system/auditing.xml b/rhel6/src/input/system/auditing.xml
index f62abba..63eb5c7 100644
--- a/rhel6/src/input/system/auditing.xml
+++ b/rhel6/src/input/system/auditing.xml
@@ -606,7 +606,7 @@ appropriate for your system:
 these events could serve as evidence of potential system compromise.</rationale>
 <ident cce="14917-9" />
 <oval id="audit_rules_unsuccessful_file_modification" />
-<ref nist="AU-2" />
+<ref nist="AU-2.1 (v),AU-2 d" disa="126" />
 </Rule>
 
 <Rule id="audit_privileged_commands">
-- 
1.7.1


--VbJkn9YxBvnuCH5J--


More information about the scap-security-guide mailing list