Nutanix AOS must initiate session audits at system start-up.
An XCCDF Rule
Description
If auditing is enabled late in the start-up process, the actions of some start-up processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.
- ID
- SV-254163r846577_rule
- Version
- NUTX-OS-000610
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the audit service to be active and start automatically with the system at startup. The Audit service is protected and restricted to allow access or modifications only from the root account.
$ sudo su -
# systemctl start auditd.service