[PATCH 22/64] Mapped CM-3(d),CM-3(e) to AIDE

Shawn Wells shawn.d.wells at gmail.com
Fri Apr 26 02:09:11 UTC 2013


-------------- next part --------------
>From 2396762114f6137a30ad775cc5f278a7cf299007 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 15:24:52 -0400
Subject: [PATCH 22/64] Mapped CM-3(d),CM-3(e) to AIDE
 CM-3(d),CM-3(e) require recording and monitoring changes to system.

---
 RHEL6/input/system/software/integrity.xml |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/RHEL6/input/system/software/integrity.xml b/RHEL6/input/system/software/integrity.xml
index 7c67419..b6e69bf 100644
--- a/RHEL6/input/system/software/integrity.xml
+++ b/RHEL6/input/system/software/integrity.xml
@@ -39,7 +39,7 @@ The AIDE package must be installed if it is to be available for integrity checki
 </rationale>
 <ident cce="27024-9" />
 <oval id="package_aide_installed" />
-<ref nist="CM-6(d),CM-6(3),SC-28, SI-7" disa="1069"/>
+<ref nist="CM-3(d),CM-3(e),CM-6(d),CM-6(3),SC-28, SI-7" disa="1069"/>
 <tested by="DS" on="20121024"/>
 </Rule>
 
@@ -78,7 +78,7 @@ If this check produces any unexpected output, investigate.
 For AIDE to be effective, an initial database of "known-good" information about files
 must be captured and it should be able to be verified against the installed files.
 </rationale>
-<ref nist="CM-6(d),CM-6(3),SC-28,SI-7" />
+<ref nist="CM-3(d),CM-3(e),CM-6(d),CM-6(3),SC-28,SI-7" />
 </Rule>
 
 <Rule id="aide_periodic_cron_checking" severity="medium">
@@ -98,7 +98,7 @@ By default, AIDE does not install itself for periodic execution. Periodically
 running AIDE may reveal unexpected changes in installed files.
 </rationale>
 <ident cce="27222-9" />
-<ref nist="CM-6(d),CM-6(3),SC-28,SI-7" disa="374,416,1069,1263,1297,1589"/>
+<ref nist="CM-3(d),CM-3(e),CM-6(d),CM-6(3),SC-28,SI-7" disa="374,416,1069,1263,1297,1589"/>
 </Rule>
 <!--
 <Group id="aide_verify_integrity_manually">
-- 
1.7.1



More information about the scap-security-guide mailing list