[PATCH 06/11] Mapped CCI-001683 to met_inherently
Shawn Wells
shawn at redhat.com
Wed May 16 19:23:08 UTC 2012
CCI requires alerts when accounts are created, which are provided natively by auditd for sysadmin/root review.
---
rhel6/src/input/auxiliary/srg_support.xml | 7 +++++++
1 files changed, 7 insertions(+), 0 deletions(-)
diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 60f003e..fb0d452 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -22,6 +22,13 @@ Red Hat Enterprise Linux meets this requirement by design.
<ref disa="1686" />
</Rule>
+<Rule id="audit_account_creation">
+<title>The operating system must notify, as required, appropriate individuals when accounts are created.</title>
+<description>Monitoring account creation is critical to ensure only appropriate personnel have access to the operating system. This reduces the possibility a rogue account will be created. In order to facilitate the monitoring, the operating system must notify designated personnel when an account is created.</description>
+<rationale>The Red Hat Enterprise Linux Auditing Subsystem provides this functionality natively, placing this information in the audit logs for system administrator review.</rationale>
+<ref disa="1683" />
+</Rule>
+
</Group>
--
1.7.1
--1yeeQ81UyVL57Vl7--
More information about the scap-security-guide
mailing list