[PATCH 06/10] Changed check text to be consistent.
Shawn Wells
shawn at redhat.com
Sat Nov 3 02:27:19 UTC 2012
On 11/2/12 12:25 AM, Michele Newman wrote:
> ---
> RHEL6/input/system/auditing.xml | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/RHEL6/input/system/auditing.xml b/RHEL6/input/system/auditing.xml
> index 36a3972..e689509 100644
> --- a/RHEL6/input/system/auditing.xml
> +++ b/RHEL6/input/system/auditing.xml
> @@ -1248,7 +1248,7 @@ administrator actions for all users and root. Add the following to
> </description>
> <ocil clause="there is not output">
> To verify that auditing is configured for system administrator actions, run the following command:
> -<pre># grep actions /etc/audit/audit.rules</pre>
> +<pre># auditctl -l | grep "watch=/etc/sudoers"</pre>
> </ocil>
> <rationale>The actions taken by system administrators should be audited to keep a record
> of what was executed on the system as well as for accountability purposes.</rationale>
> -- 1.8.0
Ack
More information about the scap-security-guide
mailing list