[PATCH 05/10] Changed command to be consistent with others.

Michele Newman mnewman at redhat.com
Fri Nov 2 04:25:32 UTC 2012


---
 RHEL6/input/system/auditing.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/RHEL6/input/system/auditing.xml b/RHEL6/input/system/auditing.xml
index 832c760..36a3972 100644
--- a/RHEL6/input/system/auditing.xml
+++ b/RHEL6/input/system/auditing.xml
@@ -1204,7 +1204,7 @@ appropriate for your system:
 </description>
 <ocil clause="there is not output">
 To verify that auditing is configured for all media exportation events, run the following command:
-<pre># grep mount /etc/audit/audit.rules</pre>
+<pre># auditctl -l | grep syscall | grep mount</pre>
 </ocil>
 <rationale>The unauthorized exportation of data to external media could result in an information leak
 where classified information, Privacy Act information, and intellectual property could be lost. An audit
-- 
1.8.0



More information about the scap-security-guide mailing list