Capacity
CIP-007-3 R6.5
Choose one
1
Rule
Severity: Medium
Ensure that Audit Log Forwarding Is Enabled
1
Rule
Severity: Medium
Ensure that Audit Log Forwarding Uses TLS
27
Rule
Severity: Low
Ensure /var/log Located On Separate Partition
27
Rule
Severity: Low
Ensure /var/log/audit Located On Separate Partition
29
Rule
Severity: Medium
Ensure the audit Subsystem is Installed
30
Rule
Severity: Medium
Enable auditd Service
29
Rule
Severity: Medium
System Audit Logs Must Have Mode 0750 or Less Permissive
3
Rule
Severity: Medium
Ensure the audit-libs package as a part of audit Subsystem is Installed
28
Rule
Severity: Medium
Configure auditd Max Log File Size
30
Rule
Severity: Medium
Configure auditd Number of Logs Retained
30
Rule
Severity: Unknown
Enable rsyslog to Accept Messages via TCP, if Acting As Log Server
30
Rule
Severity: Unknown
Enable rsyslog to Accept Messages via UDP, if Acting As Log Server
30
Rule
Severity: High
Ensure SELinux State is Enforcing
17
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - unix_chkpwd
14
Rule
Severity: Medium
Configure auditd flush priority
18
Rule
Severity: Medium
Configure SELinux Policy
1
Rule
Severity: Medium
Ensure that the cluster's audit profile is properly set
1
Rule
Severity: Medium
The Kubernetes Audit Logs Directory Must Have Mode 0700
1
Rule
Severity: Medium
The OAuth Audit Logs Directory Must Have Mode 0700
1
Rule
Severity: Medium
The OpenShift Audit Logs Directory Must Have Mode 0700
2
Rule
Severity: Medium
Ensure the libaudit1 package as a part of audit Subsystem is Installed
Patternfly
PatternFly elements
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Modules
66%