The operating system must notify the user of organization-defined security-related changes to the user's account that occur during the organization-defined time period.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-OS-000235-NA	SRG-OS-000235-NA	SRG-OS-000235-NA_rule		Medium

Description
Some organizations may define certain security events as events requiring user notification. An organization may define an event such as a password change to a user's account occurring outside of normal business hours as a security related event that requires the user be notified. In those instances where organizations define such events, the operating system must notify the affected user or users.

Description

Some organizations may define certain security events as events requiring user notification. An organization may define an event such as a password change to a user's account occurring outside of normal business hours as a security related event that requires the user be notified. In those instances where organizations define such events, the operating system must notify the affected user or users.

STIG	Date
Red Hat Enterprise Linux 6 Security Technical Implementation Guide	2013-02-05

Details

Check Text ( C-SRG-OS-000235-NA_chk )
RHEL6 cannot support this requirement without assistance from an external application, policy, or service. This requirement is NA.

Fix Text (F-SRG-OS-000235-NA_fix)
This requirement is NA. No fix is required.