Skip to content

III - Administrative Public

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000004

    Group
  • The audit system must be configured to audit account creation.

    Without auditing, malicious activity cannot be detected.
    Rule Medium Severity
  • SRG-OS-000239

    Group
  • The audit system must be configured to audit account modification.

    Without auditing, malicious activity cannot be detected.
    Rule Medium Severity
  • SRG-OS-000240

    Group
  • The operating system must automatically audit account disabling actions.

    Without auditing, malicious activity cannot be detected.
    Rule Medium Severity
  • SRG-OS-000241

    Group
  • The operating system must automatically audit account termination.

    Without auditing, malicious activity cannot be detected.
    Rule Medium Severity
  • SRG-OS-000480

    Group
  • The operating system must ensure unauthorized, security-relevant configuration changes detected are tracked.

    Without auditing, malicious activity cannot be detected.
    Rule Medium Severity
  • SRG-OS-000480

    Group
  • The audit system must be configured to audit all administrative, privileged, and security actions.

    Without auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to an individual account.
    Rule Medium Severity
  • SRG-OS-000032

    Group
  • The audit system must be configured to audit login, logout, and session initiation.

    Without auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to an individual account.
    Rule Low Severity
  • SRG-OS-000480

    Group
  • The audit system must be configured to audit failed attempts to access files and programs.

    Without auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to an individual account.
    Rule Low Severity
  • SRG-OS-000061

    Group
  • The operating system must protect against an individual falsely denying having performed a particular action. In order to do so the system must be configured to send audit records to a remote audit server.

    Keeping audit records on a remote system reduces the likelihood of audit records being changed or corrupted. Duplicating and protecting the audit trail on a separate system reduces the likelihood o...
    Rule Low Severity
  • SRG-OS-000480

    Group
  • The auditing system must not define a different auditing level for specific users.

    Without auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to an individual account.
    Rule Low Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules