[PATCH 15/64] Mapped AU-10 to audit enablement rules
Shawn Wells
shawn.d.wells at gmail.com
Fri Apr 26 02:07:13 UTC 2013
-------------- next part --------------
>From 2ba24df86e7301f6ba1e3510dc1ad2f0c6957b86 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 14:50:05 -0400
Subject: [PATCH 15/64] Mapped AU-10 to audit enablement rules
Audit profiles non-repudable event recording
---
RHEL6/input/system/auditing.xml | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/RHEL6/input/system/auditing.xml b/RHEL6/input/system/auditing.xml
index 03adfd6..abe5472 100644
--- a/RHEL6/input/system/auditing.xml
+++ b/RHEL6/input/system/auditing.xml
@@ -93,7 +93,7 @@ actions will be taken if other obstacles exist.
</rationale>
<ident cce="27058-7" />
<oval id="service_auditd_enabled" />
-<ref nist="AC-17(1),AU-1(b),AU-12(a),AU-12(c)" disa="347,157,172,880,1353,1462,1487,1115,1454,067,158,831,1190,1312,1263,130,120,1589" />
+<ref nist="AC-17(1),AU-1(b),AU-10,AU-12(a),AU-12(c)" disa="347,157,172,880,1353,1462,1487,1115,1454,067,158,831,1190,1312,1263,130,120,1589" />
<tested by="DS" on="20121024"/>
</Rule>
@@ -118,7 +118,7 @@ process during boot.
</rationale>
<ident cce="26785-6" />
<oval id="bootloader_audit_argument" />
-<ref nist="AC-17(1),AU-1(b),AU-2(a),AU-2(c),AU-2(d)" disa="1464,130" />
+<ref nist="AC-17(1),AU-1(b),AU-2(a),AU-2(c),AU-2(d),AU-10" disa="1464,130" />
</Rule>
<Group id="configure_auditd_data_retention">
--
1.7.1
More information about the scap-security-guide
mailing list