Apr 12, 2024 Miscellaneous- Audit deprecated.
- Metadata updated.
- References updated.
|
Oct 6, 2023 Functional Update- 4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl
- 4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl (64 bit)
|
Jul 5, 2023 Functional Update- 4.1.2.2 Ensure audit logs are not automatically deleted
- 4.1.2.3 Ensure system is disabled when audit logs are full - 'action_mail_acct = root'
- 4.1.2.3 Ensure system is disabled when audit logs are full - 'admin_space_left_action = halt'
- 4.1.2.3 Ensure system is disabled when audit logs are full - 'space_left_action = email'
|
Apr 12, 2023 Miscellaneous- Metadata updated.
- Platform check updated.
- Variables updated.
|
Apr 10, 2023 Functional Update- 4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl
- 4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl (64 bit)
- 4.1.8 Ensure session initiation information is collected - btmp
- 4.1.8 Ensure session initiation information is collected - wtmp
|
Mar 7, 2023 Miscellaneous- Metadata updated.
- References updated.
|
Jan 4, 2023 Miscellaneous- Metadata updated.
- Variables updated.
|
Dec 7, 2022 |
Oct 4, 2022 Functional Update- 4.1.15 Ensure system administrator command executions (sudo) are collected
- 4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl
Added- 4.1.15 Ensure system administrator command executions (sudo) are collected - (64 bit)
- 4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl (64 bit)
- 4.1.7 Ensure login and logout events are collected - /var/run/faillock
- 4.1.7 Ensure login and logout events are collected - auditctl /var/run/faillock
Removed- 4.1.5 Ensure events that modify the system's network environment are collected - /etc/sysconfig/network-scripts
- 4.1.5 Ensure events that modify the system's network environment are collected - auditctl network-scripts
- 4.1.7 Ensure login and logout events are collected - /var/log/faillog
- 4.1.7 Ensure login and logout events are collected - /var/log/tallylog
- 4.1.7 Ensure login and logout events are collected - /var/run/faillock/
- 4.1.7 Ensure login and logout events are collected - auditctl /var/log/faillog
- 4.1.7 Ensure login and logout events are collected - auditctl /var/log/tallylog
- 4.1.7 Ensure login and logout events are collected - auditctl /var/run/faillock/
|
Sep 19, 2022 Functional Update- 4.1.5 Ensure events that modify the system's network environment are collected - sethostname (32-bit)
- 4.1.5 Ensure events that modify the system's network environment are collected - sethostname (64-bit)
|
