Skip to content
Log In

SRG-APP-000501-CTR-001265

The container platform must generate audit records when successful/unsuccessful attempts to delete security objects occur.

Record Events that Modify the System's Discretionary Access Controls - fsetxattr

4 rules found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - lremovexattr

4 rules found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - lsetxattr

4 rules found Severity: Medium

Logo

Record Events that Modify the System's Discretionary Access Controls - removexattr

4 rules found Severity: Medium

Logo

Record Any Attempts to Run chcon

3 rules found Severity: Medium

Logo

Ensure auditd Collects File Deletion Events by User - rename

4 rules found Severity: Medium

Logo

Ensure auditd Collects File Deletion Events by User - renameat

4 rules found Severity: Medium

Logo

Ensure auditd Collects File Deletion Events by User - rmdir

4 rules found Severity: Medium

Logo

Ensure auditd Collects File Deletion Events by User - unlink

4 rules found Severity: Medium

Logo

Ensure auditd Collects File Deletion Events by User - unlinkat

4 rules found Severity: Medium

Logo

Ensure auditd Collects Information on the Use of Privileged Commands - chage

3 rules found Severity: Medium

Logo