Detections
Analytics

CIS CentOS 7 v3.1.2 Workstation L2

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS CentOS 7 v3.1.2 Workstation L2

Updated: 4/12/2024

Authority: CIS

Plugin: Unix

Revision: 1.12

Estimated Item Count: 132

File Details

Filename: CIS_CentOS_7_v3.1.2_Workstation_L2.audit

Size: 364 kB

MD5: 298bd23e7ada7af891702e7304e65394
SHA256: 1891abe436633a32e45f11e5f40cab416353036c5be67e3715d84de1d85d1520

Audit Changelog

 
Revision 1.12

Apr 12, 2024

Miscellaneous
  • Audit deprecated.
  • Metadata updated.
  • References updated.
Revision 1.11

Mar 18, 2024

Functional Update
  • 3.1.2 Ensure wireless interfaces are disabled
Miscellaneous
  • Metadata updated.
  • Variables updated.
Revision 1.10

Oct 6, 2023

Functional Update
  • 4.1.15 Ensure system administrator command executions (sudo) are collected
  • 4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl
  • 4.1.6 Ensure events that modify the system's Mandatory Access Controls are collected - /etc/selinux/
  • 4.1.6 Ensure events that modify the system's Mandatory Access Controls are collected - /usr/share/selinux/
  • 4.1.6 Ensure events that modify the system's Mandatory Access Controls are collected - auditctl /etc/selinux/
  • 4.1.6 Ensure events that modify the system's Mandatory Access Controls are collected - auditctl /usr/share/selinux/
Miscellaneous
  • Metadata updated.
Added
  • 4.1.15 Ensure system administrator command executions (sudo) are collected - (64 bit)
  • 4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl (64 bit)
Revision 1.9

Jul 5, 2023

Functional Update
  • 4.1.2.2 Ensure audit logs are not automatically deleted
  • 4.1.2.3 Ensure system is disabled when audit logs are full - 'action_mail_acct = root'
  • 4.1.2.3 Ensure system is disabled when audit logs are full - 'admin_space_left_action = halt'
  • 4.1.2.3 Ensure system is disabled when audit logs are full - 'space_left_action = email'
Revision 1.8

Apr 12, 2023

Functional Update
  • 4.1.8 Ensure session initiation information is collected - btmp
  • 4.1.8 Ensure session initiation information is collected - wtmp
Miscellaneous
  • Metadata updated.
  • Platform check updated.
  • Variables updated.
Revision 1.7

Mar 7, 2023

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.6

Jan 4, 2023

Miscellaneous
  • Metadata updated.
  • Variables updated.
Revision 1.5

Dec 7, 2022

Miscellaneous
  • Metadata updated.
Revision 1.4

Sep 19, 2022

Functional Update
  • 4.1.5 Ensure events that modify the system's network environment are collected - sethostname (32-bit)
  • 4.1.5 Ensure events that modify the system's network environment are collected - sethostname (64-bit)
Miscellaneous
  • References updated.
Revision 1.3

May 11, 2022

Functional Update
  • 1.1.23 Disable Automounting