Skip to content
Log In

SRG-OS-000476-GPOS-00221

The operating system must generate audit records for all account creations, modifications, disabling, and termination events.

Ensure auditd Collects System Administrator Actions

34 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information

29 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/group

26 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/gshadow

25 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/security/opasswd

26 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/passwd

26 rules found Severity: Medium

Logo

Record Events that Modify User/Group Information - /etc/shadow

26 rules found Severity: Medium

Logo

Configure audit according to OSPP requirements

10 rules found Severity: Medium

Logo

Ensure auditd Collects System Administrator Actions - /etc/sudoers

11 rules found Severity: Medium

Logo

Ensure auditd Collects System Administrator Actions - /etc/sudoers.d/

10 rules found Severity: Medium

Logo

Perform general configuration of Audit for OSPP

7 rules found Severity: Medium

Logo

Perform general configuration of Audit for OSPP (AArch64)

2 rules found Severity: Medium

Logo

Perform general configuration of Audit for OSPP (ppc64le)

2 rules found Severity: Medium

Logo