Skip to content
Log In

MA-4(1)(a)

Ensure auditd Collects Information on the Use of Privileged Commands - insmod

13 rules found Severity: Medium

Logo

Ensure auditd Collects Information on the Use of Privileged Commands - kmod

20 rules found Severity: Medium

Logo

Ensure auditd Collects Information on the Use of Privileged Commands - modprobe

13 rules found Severity: Medium

Logo

Ensure auditd Collects Information on the Use of Privileged Commands - unix_chkpwd

20 rules found Severity: Medium

Logo

Enable auditd Service

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - umount

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - umount2

1 rule found Severity: Medium

Logo

Record Any Attempts to Run chacl

1 rule found Severity: Medium

Logo

Record Any Attempts to Run chmod

1 rule found Severity: Medium

Logo

Record Any Attempts to Run setfacl

1 rule found Severity: Medium

Logo

Record Any Attempts to Run chcon

2 rules found Severity: Medium

Logo

Record Any Attempts to Run rm

1 rule found Severity: Medium

Logo

Record Attempts to Alter Logon and Logout Events - faillog

1 rule found Severity: Medium

Logo

Ensure auditd Collects Information on the Use of Privileged Commands - chfn

5 rules found Severity: Medium

Logo

Ensure auditd Collects Information on the Use of Privileged Commands - passmass

1 rule found Severity: Medium

Logo

Record Any Attempts to Run ssh-agent

1 rule found Severity: Medium

Logo

Ensure auditd Collects Information on the Use of Privileged Commands - usermod

1 rule found Severity: Medium

Logo

Ensure auditd Collects System Administrator Actions

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - chmod

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - chown

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - fchmod

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - fchmodat

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - fchown

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - fchownat

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - fremovexattr

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - fsetxattr

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - lchown

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - lremovexattr

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - lsetxattr

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - removexattr

1 rule found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - setxattr

1 rule found Severity: Medium

Logo

Record Unsuccessful Access Attempts to Files - creat

1 rule found Severity: Medium

Logo

Record Unsuccessful Access Attempts to Files - ftruncate

1 rule found Severity: Medium

Logo

Record Unsuccessful Access Attempts to Files - open

1 rule found Severity: Medium

Logo

Record Unsuccessful Access Attempts to Files - open_by_handle_at

1 rule found Severity: Medium

Logo

Record Unsuccessful Access Attempts to Files - openat

1 rule found Severity: Medium

Logo

Ensure auditd Collects Information on Kernel Module Unloading - delete_module

1 rule found Severity: Medium

Logo

Ensure auditd Collects Information on Kernel Module Loading and Unloading - finit_module

1 rule found Severity: Medium

Logo

Ensure auditd Collects Information on Kernel Module Loading - init_module

1 rule found Severity: Medium

Logo

Ensure auditd Collects Information on the Use of Privileged Commands - rmmod

1 rule found Severity: Medium

Logo

Ensure auditd Collects Information on the Use of Privileged Commands - unix2_chkpwd

3 rules found Severity: Medium

Logo