The container platform must initiate session auditing upon startup.
An XCCDF Rule
Description
<VulnDiscussion>When the container platform is started, container platform components and user services can also be started. It is important that the container platform begin auditing on startup in order to handle container platform startup events along with events for container platform components and services that begin on startup.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-233041r960888_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Configure the container platform to generate audit logs for session logging at startup. Revise all applicable system documentation.