[PATCH 05/10] Changed command to be consistent with others.

Shawn Wells shawn at redhat.com
Sat Nov 3 02:25:33 UTC 2012


On 11/2/12 12:25 AM, Michele Newman wrote:
> ---
>   RHEL6/input/system/auditing.xml | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/RHEL6/input/system/auditing.xml b/RHEL6/input/system/auditing.xml
> index 832c760..36a3972 100644
> --- a/RHEL6/input/system/auditing.xml
> +++ b/RHEL6/input/system/auditing.xml
> @@ -1204,7 +1204,7 @@ appropriate for your system:
>   </description>
>   <ocil clause="there is not output">
>   To verify that auditing is configured for all media exportation events, run the following command:
> -<pre># grep mount /etc/audit/audit.rules</pre>
> +<pre># auditctl -l | grep syscall | grep mount</pre>
>   </ocil>
>   <rationale>The unauthorized exportation of data to external media could result in an information leak
>   where classified information, Privacy Act information, and intellectual property could be lost. An audit
> -- 1.8.0
Ack



More information about the scap-security-guide mailing list