CCI-001496

22 rules found Severity: High

17 rules found Severity: High

15 rules found Severity: Medium

1 rule found Severity: High

2 rules found Severity: Medium

1 rule found Severity: High

1 rule found Severity: Medium

2 rules found Severity: High

1 rule found Severity: Medium

1 rule found Severity: High

1 rule found Severity: Medium

2 rules found Severity: Medium

1 rule found Severity: Medium

2 rules found Severity: Medium

1 rule found Severity: Medium

2 rules found Severity: High

1 rule found Severity: High

Verify and Correct File Permissions with RPM

Verify and Correct Ownership with RPM

Configure AIDE to Verify the Audit Tools

Nutanix AOS must use cryptographic mechanisms to protect the integrity of audit tools.

The Ubuntu operating system must use cryptographic mechanisms to protect the integrity of audit tools.

The Red Hat Enterprise Linux operating system must be configured so that the file permissions, ownership, and group membership of system files and commands match the vendor values.

AIX must verify the hash of audit tools.

Rancher MCM must allocate audit record storage and generate audit records associated with events, users, and groups.

Automation Controller must use cryptographic mechanisms to protect the integrity of log tools.

SLEM 5 file integrity tool must be configured to protect the integrity of the audit tools.

TOSS must use cryptographic mechanisms to protect the integrity of audit tools.

The macOS system must ensure System Integrity Protection is enabled.

The application server must use cryptographic mechanisms to protect the integrity of log tools.

Application audit tools must be cryptographically hashed.

The integrity of the audit tools must be validated by checking the files for changes in the cryptographic hash value.

Ubuntu 22.04 LTS must use cryptographic mechanisms to protect the integrity of audit tools.

The container platform must use cryptographic mechanisms to protect the integrity of audit tools.

AlmaLinux OS 9 must use cryptographic mechanisms to protect the integrity of audit tools.

The operating system must use cryptographic mechanisms to protect the integrity of audit tools.

The Mainframe Product must use cryptographic mechanisms to protect the integrity of audit tools.

All audit records must generate the event results within OpenShift.

OL 8 must use cryptographic mechanisms to protect the integrity of audit tools.

RHEL 8 must use cryptographic mechanisms to protect the integrity of audit tools.

RHEL 9 must use cryptographic mechanisms to protect the integrity of audit tools.

The SUSE operating system file integrity tool must be configured to protect the integrity of the audit tools.

System packages must be configured with the vendor-provided files, permissions, and ownerships.

The VMM must use cryptographic mechanisms to protect the integrity of audit tools.

The ESXi host must implement Secure Boot enforcement.

The ESXi host must enable Secure Boot.

The Photon operating system package files must not be modified.

The Photon operating system must use cryptographic mechanisms to protect the integrity of audit tools.

The Oracle Linux operating system must be configured so that the file permissions, ownership, and group membership of system files and commands match the vendor values.