UCF STIG Viewer Logo

Auditing must be implemented.


Overview

Finding ID Version Rule ID IA Controls Severity
V-811 GEN002660 SV-27266r1_rule ECAR-3 ECAR-1 ECAR-2 Medium
Description
Without auditing, individual system accesses cannot be tracked and malicious activity cannot be detected and traced back to an individual account.
STIG Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-28344r1_chk )
Determine if auditing is enabled.
# ps -ef |grep auditd
If the auditd process is not found, this is a finding.
Fix Text (F-24513r1_fix)
Use /etc/security/bsmconv to enable auditing on the system.