SRG-OS-000471-GPOS-00215 Controls

STIG IDVersionTitleProduct
ALMA-09-048865V1R4AlmaLinux OS 9 must audit any script or executable called by cron as root or by any privileged user.AlmaLinux OS 9
OL07-00-030810V3R3The Oracle Linux operating system must audit all uses of the pam_timestamp_check command.Oracle Linux 7
OL07-00-030805V3R3OL 7 must audit any script or executable called by cron as root or by any privileged user.Oracle Linux 7
OL08-00-030603V2R6OL 8 must enable Linux audit logging for the USBGuard daemon.Oracle Linux 8
OL08-00-030645V2R6OL 8 must audit any script or executable called by cron as root or by any privileged user.Oracle Linux 8
RHEL-07-030810V3R9The Red Hat Enterprise Linux operating system must audit all uses of the pam_timestamp_check command.Red Hat Enterprise Linux 7
RHEL-08-030655V2R5RHEL 8 must audit any script or executable called by cron as root or by any privileged user.Red Hat Enterprise Linux 8
RHEL-09-654096V2R5RHEL 9 must audit any script or executable called by cron as root or by any privileged user.Red Hat Enterprise Linux 9
TOSS-04-031140V2R3Successful/unsuccessful uses of "semanage" in TOSS must generate an audit record.Tri-Lab Operating System Stack
TOSS-04-031150V2R3Successful/unsuccessful uses of the "gpasswd" command in TOSS must generate an audit record.Tri-Lab Operating System Stack
TOSS-04-031160V2R3Successful/unsuccessful uses of the "mount" command in TOSS must generate an audit record.Tri-Lab Operating System Stack
TOSS-04-031170V2R3Successful/unsuccessful uses of the "mount" syscall in TOSS must generate an audit record.Tri-Lab Operating System Stack
TOSS-04-031180V2R3Successful/unsuccessful uses of the "su" command in TOSS must generate an audit record.Tri-Lab Operating System Stack
TOSS-04-031190V2R3Successful/unsuccessful uses of the "umount" command in TOSS must generate an audit record.Tri-Lab Operating System Stack
TOSS-04-031200V2R3Successful/unsuccessful uses of the "unix_update" in TOSS must generate an audit record.Tri-Lab Operating System Stack
TOSS-04-031210V2R3Successful/unsuccessful uses of the "usermod" command in TOSS must generate an audit record.Tri-Lab Operating System Stack
TOSS-04-031220V2R3Successful/unsuccessful uses of "unix_chkpwd" in TOSS must generate an audit record.Tri-Lab Operating System Stack
TOSS-04-031230V2R3Successful/unsuccessful uses of "userhelper" in TOSS must generate an audit record.Tri-Lab Operating System Stack
UBTU-18-010237V2R15The Ubuntu operating system must generate audit records for privileged activities or other system-level access.Ubuntu 18.04
UBTU-20-010105V2R3Ubuntu 20.04 LTS must audit any script or executable called by cron as root or by any privileged user.Ubuntu 20.04
WN10-AU-000100V3R4The system must be configured to audit Policy Change - Audit Policy Change successes.Microsoft Windows 10
WN10-AU-000107V3R4The system must be configured to audit Policy Change - Authorization Policy Change successes.Microsoft Windows 10
WN10-AU-000130V3R4The system must be configured to audit System - Other System Events successes.Microsoft Windows 10
WN10-AU-000135V3R4The system must be configured to audit System - Other System Events failures.Microsoft Windows 10
WN11-AU-000130V2R5The system must be configured to audit System - Other System Events successes.Microsoft Windows 11
WN11-AU-000135V2R5The system must be configured to audit System - Other System Events failures.Microsoft Windows 11