Skip to content
Log In

SRG-OS-000470-GPOS-00214

The operating system must generate audit records when successful/unsuccessful logon attempts occur.

Ensure auditd Collects System Administrator Actions

34 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/group

26 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/gshadow

25 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/security/opasswd

26 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/passwd

26 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/shadow

26 rules found Severity: Medium

Logo

Record Attempts to Alter Logon and Logout Events - faillock

25 rules found Severity: Medium

Logo

Record Attempts to Alter Logon and Logout Events - lastlog

28 rules found Severity: Medium

Logo

Record Attempts to Alter Logon and Logout Events - tallylog

23 rules found Severity: Medium

Logo

Configure audit according to OSPP requirements

10 rules found Severity: Medium

Logo

Ensure auditd Collects System Administrator Actions - /etc/sudoers

11 rules found Severity: Medium

Logo

Ensure auditd Collects System Administrator Actions - /etc/sudoers.d/

10 rules found Severity: Medium

Logo