UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The auditing tool, auditreduce, must be the one provided by Apple, Inc.


Overview

Finding ID Version Rule ID IA Controls Severity
V-51455 OSX8-00-00405 SV-65665r1_rule Medium
Description
The auditing tool, auditreduce, should be the one provided by Apple, Inc.
STIG Date
Apple OS X 10.8 (Mountain Lion) Workstation STIG 2015-02-10

Details

Check Text ( C-53795r1_chk )
Run the following command to ensure the audit tool, auditreduce has the correct signed hash value:

sudo codesign -dvvv /usr/sbin/auditreduce 2>&1 | grep CDHash | sed 's/CDHash=//'

The result should be "3b7644bca759043242925af1e6c1c4f4f7dadbae". If it differs, this is a finding.
Fix Text (F-56257r1_fix)
If the check fails, you will need to obtain the correct files from the original 10.8 installation media.