[PATCH 22/64] Mapped CM-3(d),CM-3(e) to AIDE
Shawn Wells
shawn.d.wells at gmail.com
Fri Apr 26 02:09:11 UTC 2013
-------------- next part --------------
>From 2396762114f6137a30ad775cc5f278a7cf299007 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 15:24:52 -0400
Subject: [PATCH 22/64] Mapped CM-3(d),CM-3(e) to AIDE
CM-3(d),CM-3(e) require recording and monitoring changes to system.
---
RHEL6/input/system/software/integrity.xml | 6 +++---
1 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/RHEL6/input/system/software/integrity.xml b/RHEL6/input/system/software/integrity.xml
index 7c67419..b6e69bf 100644
--- a/RHEL6/input/system/software/integrity.xml
+++ b/RHEL6/input/system/software/integrity.xml
@@ -39,7 +39,7 @@ The AIDE package must be installed if it is to be available for integrity checki
</rationale>
<ident cce="27024-9" />
<oval id="package_aide_installed" />
-<ref nist="CM-6(d),CM-6(3),SC-28, SI-7" disa="1069"/>
+<ref nist="CM-3(d),CM-3(e),CM-6(d),CM-6(3),SC-28, SI-7" disa="1069"/>
<tested by="DS" on="20121024"/>
</Rule>
@@ -78,7 +78,7 @@ If this check produces any unexpected output, investigate.
For AIDE to be effective, an initial database of "known-good" information about files
must be captured and it should be able to be verified against the installed files.
</rationale>
-<ref nist="CM-6(d),CM-6(3),SC-28,SI-7" />
+<ref nist="CM-3(d),CM-3(e),CM-6(d),CM-6(3),SC-28,SI-7" />
</Rule>
<Rule id="aide_periodic_cron_checking" severity="medium">
@@ -98,7 +98,7 @@ By default, AIDE does not install itself for periodic execution. Periodically
running AIDE may reveal unexpected changes in installed files.
</rationale>
<ident cce="27222-9" />
-<ref nist="CM-6(d),CM-6(3),SC-28,SI-7" disa="374,416,1069,1263,1297,1589"/>
+<ref nist="CM-3(d),CM-3(e),CM-6(d),CM-6(3),SC-28,SI-7" disa="374,416,1069,1263,1297,1589"/>
</Rule>
<!--
<Group id="aide_verify_integrity_manually">
--
1.7.1
More information about the scap-security-guide
mailing list