Skip to content
Log In

SRG-APP-000503-CTR-001275

The container platform must generate audit records when successful/unsuccessful logon attempts occur.

Record Events that Modify User/Group Information - /etc/group

23 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/gshadow

22 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/security/opasswd

23 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/passwd

23 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/shadow

23 rules found Severity: Medium

Logo

Record Attempts to Alter Logon and Logout Events - faillock

21 rules found Severity: Medium

Logo

Record Attempts to Alter Logon and Logout Events - lastlog

24 rules found Severity: Medium

Logo

Ensure auditd Collects System Administrator Actions - /etc/sudoers

11 rules found Severity: Medium

Logo

Ensure auditd Collects System Administrator Actions - /etc/sudoers.d/

10 rules found Severity: Medium

Logo

Record Attempts to Alter Logon and Logout Events - tallylog

19 rules found Severity: Medium

Logo