stig.rules example in audit-2.3.7

Andrew Ruch adruch2002 at gmail.com
Mon Nov 17 16:30:53 UTC 2014


Hello,

I was looking through the stig.rules file that is provided with RHEL
6.6 and I noticed some differences that I couldn't find in the actual
STIG. After looking at some of the items, I thought maybe they only
apply to RHEL 7. Could someone provide some clarification on the
following:

- removed ftruncate
- added open_by_handle_at
- added finit_module
- added sections regarding containers

Thanks,
Andrew Ruch




More information about the Linux-audit mailing list