UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Security auditing must be enabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-25268 OSX00140 M6 SV-38520r1_rule ECAR-1 ECAR-2 ECAR-3 Medium
Description
Auditing is the capture and maintenance of information about security-related events. Auditing helps determine the causes and the methods used for successful and failed access attempts.
STIG Date
MAC OSX 10.6 Workstation Security Technical Implementation Guide Draft 2013-01-10

Details

Check Text ( C-37733r1_chk )
Open a terminal session and run the following command.

sudo launchctl list

Verify "com.apple.auditd" appears. If the file does not appear, this is a finding.
Fix Text (F-32977r1_fix)
Open a terminal session and run the following command.

sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.auditd.plist