CCI|CCI-002132

Title

The information system notifies organization-defined personnel or roles for account enabling actions.

Reference Item Details

Category: 2013

Audit Items

View all Reference Audit Items

NamePluginAudit Name
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/groupUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/audit/configUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/environUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/groupUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/limitsUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/login.cfgUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/passwd readUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/passwd writeUnixDISA STIG AIX 7.x v2r6
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events - /etc/security/userUnixDISA STIG AIX 7.x v2r6
Big Sur - Configure the System to Notify upon Account Enabled ActionsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Configure the System to Notify upon Account Enabled ActionsUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure the System to Notify upon Account Enabled ActionsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Configure the System to Notify upon Account Enabled ActionsUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Catalina - Configure the System to Notify upon Account Enabled ActionsUnixNIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Configure the System to Notify upon Account Enabled ActionsUnixNIST macOS Catalina v1.5.0 - 800-53r4 High
Catalina - Configure the System to Notify upon Account Enabled ActionsUnixNIST macOS Catalina v1.5.0 - CNSSI 1253
Catalina - Configure the System to Notify upon Account Enabled ActionsUnixNIST macOS Catalina v1.5.0 - All Profiles
F5BI-DM-000173 - The BIG-IP appliance must be configured to generate an immediate alert for account-enabling actions.F5DISA F5 BIG-IP Device Management 11.x STIG v2r1
Monterey - Configure the System to Notify upon Account Enabled ActionsUnixNIST macOS Monterey v1.0.0 - 800-53r4 High
Monterey - Configure the System to Notify upon Account Enabled ActionsUnixNIST macOS Monterey v1.0.0 - All Profiles
Monterey - Configure the System to Notify upon Account Enabled ActionsUnixNIST macOS Monterey v1.0.0 - CNSSI 1253
Monterey - Configure the System to Notify upon Account Enabled ActionsUnixNIST macOS Monterey v1.0.0 - 800-53r4 Moderate
OL08-00-030130 - OL 8 must generate audit records for all account creation events that affect '/etc/shadow' - /etc/shadow.UnixDISA Oracle Linux 8 STIG v1r2
OL08-00-030140 - OL 8 must generate audit records for all account creation events that affect '/etc/security/opasswd' - /etc/security/opasswd.UnixDISA Oracle Linux 8 STIG v1r2
OL08-00-030150 - OL 8 must generate audit records for all account creation events that affect '/etc/passwd' - /etc/passwd.UnixDISA Oracle Linux 8 STIG v1r2
OL08-00-030160 - OL 8 must generate audit records for all account creation events that affect '/etc/gshadow' - /etc/gshadow.UnixDISA Oracle Linux 8 STIG v1r2
OL08-00-030170 - OL 8 must generate audit records for all account creation events that affect '/etc/group' - /etc/group.UnixDISA Oracle Linux 8 STIG v1r2
OL08-00-030171 - OL 8 must generate audit records for all account creations, modifications, disabling, and termination events that affect '/etc/sudoers' - /etc/sudoers.UnixDISA Oracle Linux 8 STIG v1r2
OL08-00-030172 - OL 8 must generate audit records for all account creations, modifications, disabling, and termination events that affect '/etc/sudoers.d/' - /etc/sudoers.d/.UnixDISA Oracle Linux 8 STIG v1r2
PHTN-67-000045 - The Photon operating system must audit all account modifications - groupUnixDISA STIG VMware vSphere 6.7 Photon OS v1r3
PHTN-67-000045 - The Photon operating system must audit all account modifications - gshadowUnixDISA STIG VMware vSphere 6.7 Photon OS v1r3
PHTN-67-000045 - The Photon operating system must audit all account modifications - passwdUnixDISA STIG VMware vSphere 6.7 Photon OS v1r3
PHTN-67-000045 - The Photon operating system must audit all account modifications - shadowUnixDISA STIG VMware vSphere 6.7 Photon OS v1r3
SLES-12-020200 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.UnixDISA SLES 12 STIG v2r7
SLES-12-020210 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.UnixDISA SLES 12 STIG v2r7
SLES-12-020220 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.UnixDISA SLES 12 STIG v2r7
SLES-12-020230 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/opasswd.UnixDISA SLES 12 STIG v2r7
SLES-15-030000 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.UnixDISA SLES 15 STIG v1r6
SLES-15-030010 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.UnixDISA SLES 15 STIG v1r6
SLES-15-030020 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.UnixDISA SLES 15 STIG v1r6
SLES-15-030030 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/security/opasswd.UnixDISA SLES 15 STIG v1r6
UBTU-16-020300 - The Ubuntu operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.UnixDISA STIG Ubuntu 16.04 LTS v2r3
UBTU-16-020310 - The Ubuntu operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.UnixDISA STIG Ubuntu 16.04 LTS v2r3
UBTU-16-020320 - The Ubuntu operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/gshadow.UnixDISA STIG Ubuntu 16.04 LTS v2r3
UBTU-16-020330 - The Ubuntu operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.UnixDISA STIG Ubuntu 16.04 LTS v2r3
UBTU-16-020340 - The Ubuntu operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/security/opasswd.UnixDISA STIG Ubuntu 16.04 LTS v2r3