[PATCH 07/11] Updated policy mappings for audit_file_access
Shawn Wells
shawn at redhat.com
Wed Jul 4 06:01:19 UTC 2012
Mapped to CCI-000126, AU-2.1(v), and AU-2 d
---
rhel6/src/input/system/auditing.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/rhel6/src/input/system/auditing.xml b/rhel6/src/input/system/auditing.xml
index f62abba..63eb5c7 100644
--- a/rhel6/src/input/system/auditing.xml
+++ b/rhel6/src/input/system/auditing.xml
@@ -606,7 +606,7 @@ appropriate for your system:
these events could serve as evidence of potential system compromise.</rationale>
<ident cce="14917-9" />
<oval id="audit_rules_unsuccessful_file_modification" />
-<ref nist="AU-2" />
+<ref nist="AU-2.1 (v),AU-2 d" disa="126" />
</Rule>
<Rule id="audit_privileged_commands">
--
1.7.1
--VbJkn9YxBvnuCH5J--
More information about the scap-security-guide
mailing list