The auditing tool, auditreduce, must be the one provided by Apple, Inc.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-51455 | OSX8-00-00405 | SV-65665r1_rule | Medium |
| Description |
|---|
| The auditing tool, auditreduce, should be the one provided by Apple, Inc. |
| STIG | Date |
|---|---|
| Apple OS X 10.8 (Mountain Lion) Workstation STIG | 2015-02-10 |
Details
| Check Text ( C-53795r1_chk ) |
|---|
| Run the following command to ensure the audit tool, auditreduce has the correct signed hash value: sudo codesign -dvvv /usr/sbin/auditreduce 2>&1 | grep CDHash | sed 's/CDHash=//' The result should be "3b7644bca759043242925af1e6c1c4f4f7dadbae". If it differs, this is a finding. |
| Fix Text (F-56257r1_fix) |
|---|
| If the check fails, you will need to obtain the correct files from the original 10.8 installation media. |