An XCCDF Group - A logical subset of the XCCDF Benchmark
auditd
augenrules
.rules
/etc/audit/rules.d
-w /var/log/tallylog -p wa -k logins -w -p wa -k logins -w /var/log/lastlog -p wa -k logins
auditctl
/etc/audit/audit.rules
-w -p wa -k logins
-w /var/log/lastlog -p wa -k logins
-w /var/log/tallylog -p wa -k logins