Skip to content

General Purpose Operating System Security Requirements Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The operating system must provide an audit reduction capability that supports on-demand audit review and analysis.

    The ability to perform on-demand audit review and analysis, including after the audit data has been subjected to audit reduction, greatly facilitates the organization's ability to generate incident...
    Rule Low Severity
  • SRG-OS-000349

    Group
  • SRG-OS-000350

    Group
  • SRG-OS-000351

    Group
  • SRG-OS-000352

    Group
  • The operating system must provide a report generation capability that supports after-the-fact investigations of security incidents.

    If the report generation capability does not support after-the-fact investigations, it is difficult to establish, correlate, and investigate the events leading up to an outage or attack or identify...
    Rule Low Severity
  • SRG-OS-000353

    Group
  • SRG-OS-000354

    Group
  • The operating system must not alter original content or time ordering of audit records when it provides a report generation capability.

    If the report generation capability alters the content or time ordering of audit records, the integrity of the audit records is compromised, and the records are no longer usable for forensic analys...
    Rule Medium Severity
  • SRG-OS-000355

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules