Skip to content

Guide to the Secure Configuration of Fedora

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Record Successful Creation Attempts to Files - open_by_handle_at O_TRUNC_WRITE

    The audit system should collect detailed file access records for all users and root. The <code>open_by_handle_at</code> syscall can be used to modify files if called for write operation with the O_...
    Rule Medium Severity
  • Record Successful Creation Attempts to Files - open O_CREAT

    The <code>open</code> syscall can be used to create new files when O_CREAT flag is specified. The following audit rules will assure that successful attempts to create a file via <code>open</code> ...
    Rule Medium Severity
  • Record Successful Creation Attempts to Files - open O_TRUNC_WRITE

    The audit system should collect detailed file access records for all users and root. The <code>open</code> syscall can be used to modify files if called for write operation with the O_TRUNC_WRITE f...
    Rule Medium Severity
  • Record Successful Creation Attempts to Files - openat O_CREAT

    The <code>openat</code> syscall can be used to create new files when O_CREAT flag is specified. The following audit rules will assure that successful attempts to create a file via <code>openat</co...
    Rule Medium Severity
  • Record Successful Creation Attempts to Files - openat O_TRUNC_WRITE

    The audit system should collect detailed file access records for all users and root. The <code>openat</code> syscall can be used to modify files if called for write operation with the O_TRUNC_WRITE...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules