Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-203670 | SRG-OS-000254-GPOS-00095 | SV-203670r379231_rule | Medium |
Description |
---|
If auditing is enabled late in the start-up process, the actions of some start-up processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created. |
STIG | Date |
---|---|
General Purpose Operating System Security Requirements Guide | 2022-06-06 |
Check Text ( C-3795r374837_chk ) |
---|
Verify the operating system initiates session audits at system start-up. If it does not, this is a finding. |
Fix Text (F-3795r374838_fix) |
---|
Configure the operating system to initiate session audits at system start-up. |