[PATCH 06/11] Mapped CCI-001683 to met_inherently

Shawn Wells shawn at redhat.com
Wed May 16 19:23:08 UTC 2012


CCI requires alerts when accounts are created, which are provided natively by auditd for sysadmin/root review.
---
 rhel6/src/input/auxiliary/srg_support.xml |    7 +++++++
 1 files changed, 7 insertions(+), 0 deletions(-)

diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 60f003e..fb0d452 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -22,6 +22,13 @@ Red Hat Enterprise Linux meets this requirement by design.
 <ref disa="1686" />
 </Rule>
 
+<Rule id="audit_account_creation">
+<title>The operating system must notify, as required, appropriate individuals when accounts are created.</title>
+<description>Monitoring account creation is critical to ensure only appropriate personnel have access to the operating system.  This reduces the possibility a rogue account will be created.  In order to facilitate the monitoring, the operating system must notify designated personnel when an account is created.</description>
+<rationale>The Red Hat Enterprise Linux Auditing Subsystem provides this functionality natively, placing this information in the audit logs for system administrator review.</rationale>
+<ref disa="1683" />
+</Rule>
+
 
 </Group>
 
-- 
1.7.1


--1yeeQ81UyVL57Vl7--


More information about the scap-security-guide mailing list