Skip to content

Nutanix AOS must generate audit records when successful/unsuccessful attempts to modify categories of information occur.

An XCCDF Rule

Description

<VulnDiscussion>Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one. Audit records can be generated from various components within the information system (e.g., module or policy filter).</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID
SV-254153r846547_rule
Severity
Medium
References
Updated



Remediation - Manual Procedure

Configure the audit rules by running the following command:

$ sudo salt-call state.sls security/CVM/auditCVM