II - Mission Support Classified
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000004
<GroupDescription></GroupDescription>Group -
The audit system must be configured to audit account creation.
<VulnDiscussion>Without auditing, malicious activity cannot be detected.</VulnDiscussion><FalsePositives></FalsePositives>&...Rule Medium Severity -
SRG-OS-000239
<GroupDescription></GroupDescription>Group -
The audit system must be configured to audit account modification.
<VulnDiscussion>Without auditing, malicious activity cannot be detected.</VulnDiscussion><FalsePositives></FalsePositives>&...Rule Medium Severity -
SRG-OS-000240
<GroupDescription></GroupDescription>Group -
The operating system must automatically audit account disabling actions.
<VulnDiscussion>Without auditing, malicious activity cannot be detected.</VulnDiscussion><FalsePositives></FalsePositives>&...Rule Medium Severity -
SRG-OS-000241
<GroupDescription></GroupDescription>Group -
The operating system must automatically audit account termination.
<VulnDiscussion>Without auditing, malicious activity cannot be detected.</VulnDiscussion><FalsePositives></FalsePositives>&...Rule Medium Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
The operating system must ensure unauthorized, security-relevant configuration changes detected are tracked.
<VulnDiscussion>Without auditing, malicious activity cannot be detected.</VulnDiscussion><FalsePositives></FalsePositives>&...Rule Medium Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
The audit system must be configured to audit all administrative, privileged, and security actions.
<VulnDiscussion>Without auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to ...Rule Medium Severity -
SRG-OS-000032
<GroupDescription></GroupDescription>Group -
The audit system must be configured to audit login, logout, and session initiation.
<VulnDiscussion>Without auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to ...Rule Low Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
The audit system must be configured to audit failed attempts to access files and programs.
<VulnDiscussion>Without auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to ...Rule Low Severity -
SRG-OS-000061
<GroupDescription></GroupDescription>Group -
The operating system must protect against an individual falsely denying having performed a particular action. In order to do so the system must be configured to send audit records to a remote audit server.
<VulnDiscussion>Keeping audit records on a remote system reduces the likelihood of audit records being changed or corrupted. Duplicating and ...Rule Low Severity -
SRG-OS-000480
<GroupDescription></GroupDescription>Group -
The auditing system must not define a different auditing level for specific users.
<VulnDiscussion>Without auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to ...Rule Low Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.