No useradd/groupadd in stig.rules? - Linux-audit - Linux-Audit List Archives

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

No useradd/groupadd in stig.rules?

Is unlink the audit equivalent of...

RE: Kernel audit_context and...

leam hall

Friday, 25 October 2013 Fri, 25 Oct '13

11:11 a.m.

Any reason not to include the below in stig.rules, to cover GEN002750? ## Things that affect adding users/groups -w /usr/sbin/useradd -p wa -k useradd -w /usr/sbin/groupadd -p wa -k groupadd Thanks! Leam -- Mind on a Mission <http://leamhall.blogspot.com/>

Attachments:

attachment.html (text/html — 413 bytes)

Reply

Show replies by date

Steve Grubb

Friday, 25 October Fri, 25 Oct

11:16 a.m.

On Friday, October 25, 2013 12:11:34 PM leam hall wrote:

Any reason not to include the below in stig.rules, to cover GEN002750? ## Things that affect adding users/groups -w /usr/sbin/useradd -p wa -k useradd -w /usr/sbin/groupadd -p wa -k groupadd

Those programs should create their own events. -Steve

Reply

4024

days inactive

4024

days old

linux-audit@lists.linux-audit.osci.io

Manage subscription

1 comments

2 participants

tags (0)

participants (2)

leam hall
Steve Grubb