[PATCH 07/20] Mapped AU-8

Shawn Wells shawn.d.wells at gmail.com
Sat Jan 12 18:18:51 UTC 2013


-------------- next part --------------
>From 5ec98e6ea5822498f5d112371f1048aa4cd843df Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 10 Jan 2013 08:10:24 -0500
Subject: [PATCH 07/20] Mapped AU-8

AU-8:	Calls for audit events to be timestamped. This is native and non-configurable.

AU-8(1):	Calls for the use of centralized time keeping, and sync'd against an
		authoritative time source
---
 RHEL6/input/auxiliary/nist_support.xml |    2 +-
 RHEL6/input/profiles/nist-CL-IL-AL.xml |   10 ++++++----
 RHEL6/input/services/ntp.xml           |    6 +++---
 3 files changed, 10 insertions(+), 8 deletions(-)

diff --git a/RHEL6/input/auxiliary/nist_support.xml b/RHEL6/input/auxiliary/nist_support.xml
index 9ffc7b3..364b06a 100644
--- a/RHEL6/input/auxiliary/nist_support.xml
+++ b/RHEL6/input/auxiliary/nist_support.xml
@@ -36,7 +36,7 @@ compliance. This is a permanent not a finding.
 <description>
 This requirement is permanent not a finding. No fix is required.
 </description>
-<ref nist="AC-3(4),AC-17(c),AC-17(d),AC-17(e),AC-18(b),AC-18(c),AC-18(4),AC-19(c),AC-19(f),AC-19(g),AU-3" \>
+<ref nist="AC-3(4),AC-17(c),AC-17(d),AC-17(e),AC-18(b),AC-18(c),AC-18(4),AC-19(c),AC-19(f),AC-19(g),AU-3,AU-8" \>
 </Rule>
 
 </Group>
diff --git a/RHEL6/input/profiles/nist-CL-IL-AL.xml b/RHEL6/input/profiles/nist-CL-IL-AL.xml
index 500e761..c865cac 100644
--- a/RHEL6/input/profiles/nist-CL-IL-AL.xml
+++ b/RHEL6/input/profiles/nist-CL-IL-AL.xml
@@ -264,11 +264,13 @@ assurance."</description>
 <!-- AU-3(2) -->
 <select idref="rsyslog_send_messages_to_logserver" selected="true" \>
 
+<!-- AU-8(1) -->
+<select idref="enable_ntpd" selected="true" \>
+<select idref="ntpd_specify_remote_server" selected="true" \>
+<select idref="ntpd_specify_multiple_servers" selected="true" \>
+
+
 <!-- REMAINING MAPPINGS
-     AU-6
-     AU-6(3)
-     AU-8
-     AU-8(1)
      AU-9
      AU-9(4)
      AU-11
diff --git a/RHEL6/input/services/ntp.xml b/RHEL6/input/services/ntp.xml
index 3ab4f58..cde65de 100644
--- a/RHEL6/input/services/ntp.xml
+++ b/RHEL6/input/services/ntp.xml
@@ -47,7 +47,7 @@ services such as Kerberos, but it is also important for maintaining accurate
 logs and auditing possible security breaches.</rationale>
 <ident cce="27093-4" />
 <oval id="service_ntpd_enabled" />
-<ref disa="160" />
+<ref nist="AU-8(1)" disa="160" />
 <tested by="DS" on="20121024"/>
 </Rule>
 
@@ -74,7 +74,7 @@ real time events. Using a trusted NTP server provided by your organization is
 recommended.</rationale>
 <ident cce="27098-3" />
 <oval id="ntp_remote_server" />
-<ref disa="160" />
+<ref nist="AU-8(1)" disa="160" />
 <tested by="DS" on="20121024"/>
 </Rule>
 
@@ -92,6 +92,7 @@ accurate time data, in the event that one of the specified servers becomes
 unavailable. This is typical for a system acting as an NTP server for
 other systems.
 </rationale>
+<ref nist="AU-8(1)" />
 </Rule>
 
 <!-- future Rules (for later profiles/enhancements):
@@ -100,4 +101,3 @@ enabling cryptographic authentication (multiple options)
 -->
 
 </Group>
-
-- 
1.7.1



More information about the scap-security-guide mailing list