Capacity
SRG-APP-000495-CTR-001235
29
Rule
Severity: Medium
Ensure auditd Collects Information on Exporting to Media (successful)
22
Rule
Severity: Medium
Record Events that Modify User/Group Information - /etc/group
21
Rule
Severity: Medium
Record Events that Modify User/Group Information - /etc/gshadow
22
Rule
Severity: Medium
Record Events that Modify User/Group Information - /etc/security/opasswd
22
Rule
Severity: Medium
Record Events that Modify User/Group Information - /etc/passwd
22
Rule
Severity: Medium
Record Events that Modify User/Group Information - /etc/shadow
28
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - chmod
28
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - chown
29
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - fchmod
28
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - fchmodat
28
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - fchown
28
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - fchownat
29
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - fremovexattr
28
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - fsetxattr
29
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - lchown
28
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - lremovexattr
28
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - lsetxattr
28
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - removexattr
28
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - setxattr
29
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - umount2
28
Rule
Severity: Medium
Ensure auditd Collects File Deletion Events by User - rename
28
Rule
Severity: Medium
Ensure auditd Collects File Deletion Events by User - renameat
28
Rule
Severity: Medium
Ensure auditd Collects File Deletion Events by User - rmdir
28
Rule
Severity: Medium
Ensure auditd Collects File Deletion Events by User - unlink
28
Rule
Severity: Medium
Ensure auditd Collects File Deletion Events by User - unlinkat
22
Rule
Severity: Medium
Record Unsuccessful Access Attempts to Files - creat
22
Rule
Severity: Medium
Record Unsuccessful Access Attempts to Files - ftruncate
23
Rule
Severity: Medium
Record Unsuccessful Access Attempts to Files - open
22
Rule
Severity: Medium
Record Unsuccessful Access Attempts to Files - openat
22
Rule
Severity: Medium
Record Unsuccessful Access Attempts to Files - truncate
22
Rule
Severity: Medium
Ensure auditd Collects Information on Kernel Module Unloading - delete_module
23
Rule
Severity: Medium
Ensure auditd Collects Information on Kernel Module Loading and Unloading - finit_module
21
Rule
Severity: Medium
Ensure auditd Collects Information on Kernel Module Loading - init_module
23
Rule
Severity: Medium
Record Attempts to Alter Logon and Logout Events - lastlog
16
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - kmod
20
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - sudo
27
Rule
Severity: Medium
Record Events that Modify the System's Discretionary Access Controls - umount
22
Rule
Severity: Medium
Record Unsuccessful Access Attempts to Files - open_by_handle_at
11
Rule
Severity: Medium
Ensure auditd Collects System Administrator Actions - /etc/sudoers
10
Rule
Severity: Medium
Ensure auditd Collects System Administrator Actions - /etc/sudoers.d/
14
Rule
Severity: Medium
Record Any Attempts to Run chacl
14
Rule
Severity: Medium
Record Any Attempts to Run setfacl
17
Rule
Severity: Medium
Record Any Attempts to Run chcon
14
Rule
Severity: Medium
Record Any Attempts to Run semanage
13
Rule
Severity: Medium
Record Any Attempts to Run setfiles
14
Rule
Severity: Medium
Record Any Attempts to Run setsebool
17
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - chage
17
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - chsh
17
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - crontab
17
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - gpasswd
17
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - newgrp
17
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - pam_timestamp_check
17
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - passwd
15
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - postdrop
15
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - postqueue
14
Rule
Severity: Medium
Record Any Attempts to Run ssh-agent
17
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - ssh-keysign
17
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - su
16
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - sudoedit
17
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - unix_chkpwd
10
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - unix_update
13
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - userhelper
14
Rule
Severity: Medium
Ensure auditd Collects Information on the Use of Privileged Commands - usermod
9
Rule
Severity: Medium
Configure immutable Audit login UIDs
Patternfly
PatternFly elements
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Modules