1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
controls:
- id: SRG-OS-000477-GPOS-00222
levels:
- medium
title: {{{ full_name }}} must generate audit records for all kernel module load,
unload, and restart actions, and also for all program initiations.
rules:
- audit_rules_kernel_module_loading_delete
- audit_rules_kernel_module_loading_finit
- audit_rules_kernel_module_loading_init
- audit_rules_privileged_commands_kmod
- audit_rules_privileged_commands_rmmod
- audit_rules_privileged_commands_modprobe
- audit_privileged_commands_init
- audit_privileged_commands_poweroff
- audit_privileged_commands_reboot
- audit_privileged_commands_shutdown
status: automated
|
