SUSE Linux Enterprise Server 15 Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
The SUSE operating system must generate audit records for the /var/log/wtmp file.
Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or...Rule Medium Severity -
SRG-OS-000472-GPOS-00217
Group -
SRG-OS-000479-GPOS-00224
Group -
The SUSE operating system must off-load audit records onto a different system or media from the system being audited.
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.Rule Medium Severity -
SRG-OS-000479-GPOS-00224
Group -
SRG-OS-000480-GPOS-00227
Group -
The SUSE operating system must use a separate file system for the system audit data path.
The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.Rule Low Severity -
SRG-OS-000480-GPOS-00227
Group -
The SUSE operating system must not disable syscall auditing.
By default, the SUSE operating system includes the "-a task,never" audit rule as a default. This rule suppresses syscall auditing for all tasks started with this rule in effect. Because the audit d...Rule Medium Severity -
SRG-OS-000480-GPOS-00226
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.