SRG-OS-000475-GPOS-00220

The operating system must generate audit records for all direct access to the information system.

34 rules found Severity: Medium

36 rules found Severity: Medium

7 rules found Severity: Medium

10 rules found Severity: Medium

13 rules found Severity: Medium

9 rules found Severity: Medium

7 rules found Severity: Medium

4 rules found Severity: Medium

2 rules found Severity: Medium

SRG-OS-000475-GPOS-00220

Ensure the audit Subsystem is Installed

Enable auditd Service

Ensure the audit-libs package as a part of audit Subsystem is Installed

Configure audit according to OSPP requirements

Configure immutable Audit login UIDs

Configure auditing of unsuccessful file accesses

Configure auditing of successful file accesses

Configure basic parameters of Audit system

Configure auditing of unsuccessful file creations

Configure auditing of successful file creations

Configure auditing of unsuccessful file deletions

Configure auditing of successful file deletions

Configure auditing of unsuccessful file modifications

Configure auditing of successful file modifications

Configure auditing of loading and unloading of kernel modules

Perform general configuration of Audit for OSPP

Configure auditing of unsuccessful ownership changes

Configure auditing of successful ownership changes

Configure auditing of unsuccessful permission changes

Configure auditing of successful permission changes

Configure auditing of unsuccessful file accesses (AArch64)

Configure auditing of unsuccessful file accesses (ppc64le)

Configure auditing of successful file accesses (AArch64)

Configure auditing of successful file accesses (ppc64le)

Configure auditing of unsuccessful file creations (AArch64)

Configure auditing of unsuccessful file creations (ppc64le)

Configure auditing of successful file creations (AArch64)

Configure auditing of successful file creations (ppc64le)

Configure auditing of unsuccessful file deletions (AArch64)

Configure auditing of unsuccessful file deletions (ppc64le)

Configure auditing of successful file deletions (AArch64)

Configure auditing of successful file deletions (ppc64le)

Configure auditing of unsuccessful file modifications (AARch64)

Configure auditing of unsuccessful file modifications (ppc64le)

Configure auditing of successful file modifications (AArch64)

Configure auditing of successful file modifications (ppc64le)

Configure auditing of loading and unloading of kernel modules (ppc64le)

Perform general configuration of Audit for OSPP (AArch64)

Perform general configuration of Audit for OSPP (ppc64le)

Configure auditing of unsuccessful ownership changes (AArch64)

Configure auditing of unsuccessful ownership changes (ppc64le)

Configure auditing of successful ownership changes (AArch64)

Configure auditing of successful ownership changes (ppc64le)

Configure auditing of unsuccessful permission changes (AArch64)

Configure auditing of unsuccessful permission changes (ppc64le)

Configure auditing of successful permission changes (AArch64)

Configure auditing of successful permission changes (ppc64le)

Ensure the libaudit1 package as a part of audit Subsystem is Installed