Nutanix AOS must generate audit records for all direct access to the information system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-254161	NUTX-OS-000580	SV-254161r991581_rule		Medium

Description
Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one. Audit records can be generated from various components within the information system (e.g., module or policy filter). Satisfies: SRG-OS-000472-GPOS-00217, SRG-OS-000475-GPOS-00220

Description

Without generating audit records specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one. Audit records can be generated from various components within the information system (e.g., module or policy filter). Satisfies: SRG-OS-000472-GPOS-00217, SRG-OS-000475-GPOS-00220

STIG	Date
Nutanix AOS 5.20.x OS Security Technical Implementation Guide	2024-06-18

Details

Check Text ( C-57646r846569_chk )
Confirm Nutanix AOS is configured with the ausearch tool. The ausearch tool is a feature of the audit rpm. $ sudo yum list installed audit Installed Packages audit.x86_64 If Installed Packages does not list the audit.x86_64 or No matching Packages to list is returned, this is a finding.

Fix Text (F-57597r846570_fix)
Configure the system to generate audit records for all direct access to the information system by installing the audit package. $ sudo yum install audit