[PATCH 15/64] Mapped AU-10 to audit enablement rules

Shawn Wells shawn.d.wells at gmail.com
Fri Apr 26 02:07:13 UTC 2013


-------------- next part --------------
>From 2ba24df86e7301f6ba1e3510dc1ad2f0c6957b86 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 14:50:05 -0400
Subject: [PATCH 15/64] Mapped AU-10 to audit enablement rules
 Audit profiles non-repudable event recording

---
 RHEL6/input/system/auditing.xml |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/system/auditing.xml b/RHEL6/input/system/auditing.xml
index 03adfd6..abe5472 100644
--- a/RHEL6/input/system/auditing.xml
+++ b/RHEL6/input/system/auditing.xml
@@ -93,7 +93,7 @@ actions will be taken if other obstacles exist.
 </rationale>
 <ident cce="27058-7" />
 <oval id="service_auditd_enabled" />
-<ref nist="AC-17(1),AU-1(b),AU-12(a),AU-12(c)" disa="347,157,172,880,1353,1462,1487,1115,1454,067,158,831,1190,1312,1263,130,120,1589" />
+<ref nist="AC-17(1),AU-1(b),AU-10,AU-12(a),AU-12(c)" disa="347,157,172,880,1353,1462,1487,1115,1454,067,158,831,1190,1312,1263,130,120,1589" />
 <tested by="DS" on="20121024"/>
 </Rule>
 
@@ -118,7 +118,7 @@ process during boot.
 </rationale>
 <ident cce="26785-6" />
 <oval id="bootloader_audit_argument" />
-<ref nist="AC-17(1),AU-1(b),AU-2(a),AU-2(c),AU-2(d)" disa="1464,130" />
+<ref nist="AC-17(1),AU-1(b),AU-2(a),AU-2(c),AU-2(d),AU-10" disa="1464,130" />
 </Rule>
 
 <Group id="configure_auditd_data_retention">
-- 
1.7.1



More information about the scap-security-guide mailing list