[PATCH 06/10] Changed check text to be consistent.
Michele Newman
mnewman at redhat.com
Fri Nov 2 04:25:33 UTC 2012
---
RHEL6/input/system/auditing.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/RHEL6/input/system/auditing.xml b/RHEL6/input/system/auditing.xml
index 36a3972..e689509 100644
--- a/RHEL6/input/system/auditing.xml
+++ b/RHEL6/input/system/auditing.xml
@@ -1248,7 +1248,7 @@ administrator actions for all users and root. Add the following to
</description>
<ocil clause="there is not output">
To verify that auditing is configured for system administrator actions, run the following command:
-<pre># grep actions /etc/audit/audit.rules</pre>
+<pre># auditctl -l | grep "watch=/etc/sudoers"</pre>
</ocil>
<rationale>The actions taken by system administrators should be audited to keep a record
of what was executed on the system as well as for accountability purposes.</rationale>
--
1.8.0
More information about the scap-security-guide
mailing list