CCI-001352 requires protection of audit records from users with privileged access. The audit system runs and writes to files as the root user, thus users with legitimate access to the root account will have access to audit information.
Signed-off-by: Willy Santos <[email protected]> --- rhel6/src/input/auxiliary/srg_support.xml | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml index 575753d..6241599 100644 --- a/rhel6/src/input/auxiliary/srg_support.xml +++ b/rhel6/src/input/auxiliary/srg_support.xml @@ -30,7 +30,7 @@ The requirement is impractical or out of scope. The product does not meet this requirement. The requirement is impractical or out of scope. </description> -<ref disa="28,29,30,32,24,1695,1169,1170" /> +<ref disa="28,29,30,32,24,1695,1169,1170,1352" /> </Group> <!-- end unmet_impractical_product --> <Group id="requirement_unclear"> -- 1.7.7.6 _______________________________________________ scap-security-guide mailing list [email protected] https://fedorahosted.org/mailman/listinfo/scap-security-guide
