SV-227728r603266_rule
V-227728
SRG-OS-000004
GEN002750
CAT III
10
Edit /etc/security/audit_control and add ua to the flags list and naflags list.
Refresh auditd.
# svcadm refresh auditd
Check the system's audit configuration.
# grep ua /etc/security/audit_control
If the ua flag is not set, and both the +ua and -ua flags are not set, this is a finding.
If the ua naflag is not set, and both the +ua and -ua naflags are not set, this is a finding.
V-227728
False
GEN002750
Check the system's audit configuration.
# grep ua /etc/security/audit_control
If the ua flag is not set, and both the +ua and -ua flags are not set, this is a finding.
If the ua naflag is not set, and both the +ua and -ua naflags are not set, this is a finding.
M
4061