Mar 20, 2024 Functional Update- 4.1.4.4 Ensure the audit log directory is 0750 or more restrictive
|
Mar 18, 2024 Functional Update- 4.1.4.1 Ensure audit log files are mode 0640 or less permissive
- 4.1.4.2 Ensure only authorized users own audit log files
- 4.1.4.5 Ensure audit configuration files are 640 or more restrictive
- 4.1.4.6 Ensure audit configuration files are owned by root
- 4.1.4.7 Ensure audit configuration files belong to group root
Miscellaneous- Metadata updated.
- Variables updated.
Added- 4.1.3.6 Ensure use of privileged commands are collected
Removed- 4.1.3.6 Ensure use of privileged commands are collected - /etc/audit/rules.d
- 4.1.3.6 Ensure use of privileged commands are collected - auditctl
|
Dec 27, 2023 Functional Update- 4.1.3.19 Ensure kernel module loading unloading and modification is collected - kmod symlinks
- 4.1.4.1 Ensure audit log files are mode 0640 or less permissive
- 4.1.4.2 Ensure only authorized users own audit log files
- 4.1.4.4 Ensure the audit log directory is 0750 or more restrictive
|
Nov 17, 2023 Functional Update- 5.2.13 Ensure SSH AllowTcpForwarding is disabled - sshd output
|
Sep 19, 2023 Functional Update- 4.1.4.3 Ensure only authorized groups are assigned ownership of audit log files - stat
|
Aug 29, 2023 Functional Update- 4.1.3.4 Ensure events that modify date and time information are collected - 'stime'
- 4.1.3.4 Ensure events that modify date and time information are collected - auditctl stime
|
Aug 28, 2023 Functional Update- 4.1.3.10 Ensure successful file system mounts are collected - auditctl b64
|
Jul 5, 2023 Functional Update- 4.1.2.3 Ensure system is disabled when audit logs are full - action_mail_acct
- 4.1.2.3 Ensure system is disabled when audit logs are full - space_left_action
|
May 11, 2023 Functional Update- 4.1.4.10 Ensure audit tools belong to group root
- 4.1.4.8 Ensure audit tools are 755 or more restrictive
- 4.1.4.9 Ensure audit tools are owned by root
|
Apr 12, 2023 Miscellaneous- Metadata updated.
- Platform check updated.
|
