No useradd/groupadd in stig.rules?

Steve Grubb sgrubb at redhat.com
Fri Oct 25 16:16:10 UTC 2013


On Friday, October 25, 2013 12:11:34 PM leam hall wrote:
> Any reason not to include the below in stig.rules, to cover GEN002750?
> 
> ## Things that affect adding users/groups
> -w /usr/sbin/useradd -p wa -k useradd
> -w /usr/sbin/groupadd -p wa -k groupadd

Those programs should create their own events.

-Steve




More information about the Linux-audit mailing list