|
 |
fe0dde |
From f18c63f7d5b2da86fab1e6a135d6bb70689f46d6 Mon Sep 17 00:00:00 2001
|
|
|
fe0dde |
From: Gabriel Becker <ggasparb@redhat.com>
|
|
|
fe0dde |
Date: Wed, 9 Sep 2020 17:51:15 +0200
|
|
|
fe0dde |
Subject: [PATCH] Fix SRG mapping of audit rules.
|
|
|
fe0dde |
|
|
|
fe0dde |
---
|
|
|
fe0dde |
.../audit_rules_file_deletion_events_rename/rule.yml | 2 +-
|
|
|
fe0dde |
.../audit_rules_file_deletion_events_renameat/rule.yml | 2 +-
|
|
|
fe0dde |
.../audit_rules_file_deletion_events_rmdir/rule.yml | 2 +-
|
|
|
fe0dde |
.../audit_rules_file_deletion_events_unlink/rule.yml | 2 +-
|
|
|
fe0dde |
.../audit_rules_file_deletion_events_unlinkat/rule.yml | 2 +-
|
|
|
fe0dde |
5 files changed, 5 insertions(+), 5 deletions(-)
|
|
|
fe0dde |
|
|
|
fe0dde |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rename/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rename/rule.yml
|
|
|
fe0dde |
index b8a5922bb6..96794e06bb 100644
|
|
|
fe0dde |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rename/rule.yml
|
|
|
fe0dde |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rename/rule.yml
|
|
|
fe0dde |
@@ -38,7 +38,7 @@ references:
|
|
|
fe0dde |
nist-csf: DE.AE-3,DE.AE-5,DE.CM-1,DE.CM-3,DE.CM-7,ID.SC-4,PR.AC-3,PR.MA-2,PR.PT-1,PR.PT-4,RS.AN-1,RS.AN-4
|
|
|
fe0dde |
ospp: FAU_GEN.1.1.c
|
|
|
fe0dde |
pcidss: Req-10.2.7
|
|
|
fe0dde |
- srg: SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00210,SRG-OS-000468-GPOS-00212,SRG-OS-000392-GPOS-00172
|
|
|
fe0dde |
+ srg: SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00211,SRG-OS-000468-GPOS-00212,SRG-OS-000392-GPOS-00172
|
|
|
fe0dde |
vmmsrg: SRG-OS-000466-VMM-001870,SRG-OS-000468-VMM-001890
|
|
|
fe0dde |
stigid@rhel7: RHEL-07-030880
|
|
|
fe0dde |
isa-62443-2013: 'SR 1.13,SR 2.10,SR 2.11,SR 2.12,SR 2.6,SR 2.8,SR 2.9,SR 3.1,SR 3.5,SR 3.8,SR 4.1,SR 4.3,SR 5.1,SR 5.2,SR 5.3,SR 6.1,SR 6.2,SR 7.1,SR 7.6'
|
|
|
fe0dde |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml
|
|
|
fe0dde |
index 585f90dfda..dac97d2dc2 100644
|
|
|
fe0dde |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml
|
|
|
fe0dde |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml
|
|
|
fe0dde |
@@ -38,7 +38,7 @@ references:
|
|
|
fe0dde |
nist-csf: DE.AE-3,DE.AE-5,DE.CM-1,DE.CM-3,DE.CM-7,ID.SC-4,PR.AC-3,PR.MA-2,PR.PT-1,PR.PT-4,RS.AN-1,RS.AN-4
|
|
|
fe0dde |
ospp: FAU_GEN.1.1.c
|
|
|
fe0dde |
pcidss: Req-10.2.7
|
|
|
fe0dde |
- srg: SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00210,SRG-OS-000468-GPOS-00212,SRG-OS-000392-GPOS-00172
|
|
|
fe0dde |
+ srg: SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00211,SRG-OS-000468-GPOS-00212,SRG-OS-000392-GPOS-00172
|
|
|
fe0dde |
vmmsrg: SRG-OS-000466-VMM-001870,SRG-OS-000468-VMM-001890
|
|
|
fe0dde |
stigid@rhel7: RHEL-07-030890
|
|
|
fe0dde |
isa-62443-2013: 'SR 1.13,SR 2.10,SR 2.11,SR 2.12,SR 2.6,SR 2.8,SR 2.9,SR 3.1,SR 3.5,SR 3.8,SR 4.1,SR 4.3,SR 5.1,SR 5.2,SR 5.3,SR 6.1,SR 6.2,SR 7.1,SR 7.6'
|
|
|
fe0dde |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml
|
|
|
fe0dde |
index da3e3c0fd7..5bc1e04875 100644
|
|
|
fe0dde |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml
|
|
|
fe0dde |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml
|
|
|
fe0dde |
@@ -38,7 +38,7 @@ references:
|
|
|
fe0dde |
nist-csf: DE.AE-3,DE.AE-5,DE.CM-1,DE.CM-3,DE.CM-7,ID.SC-4,PR.AC-3,PR.MA-2,PR.PT-1,PR.PT-4,RS.AN-1,RS.AN-4
|
|
|
fe0dde |
ospp: FAU_GEN.1.1.c
|
|
|
fe0dde |
pcidss: Req-10.2.7
|
|
|
fe0dde |
- srg: SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00210,SRG-OS-000468-GPOS-00212,SRG-OS-000392-GPOS-00172
|
|
|
fe0dde |
+ srg: SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00211,SRG-OS-000468-GPOS-00212,SRG-OS-000392-GPOS-00172
|
|
|
fe0dde |
vmmsrg: SRG-OS-000466-VMM-001870,SRG-OS-000468-VMM-001890
|
|
|
fe0dde |
stigid@rhel7: RHEL-07-030900
|
|
|
fe0dde |
isa-62443-2013: 'SR 1.13,SR 2.10,SR 2.11,SR 2.12,SR 2.6,SR 2.8,SR 2.9,SR 3.1,SR 3.5,SR 3.8,SR 4.1,SR 4.3,SR 5.1,SR 5.2,SR 5.3,SR 6.1,SR 6.2,SR 7.1,SR 7.6'
|
|
|
fe0dde |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlink/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlink/rule.yml
|
|
|
fe0dde |
index c9b1f16d66..0195814776 100644
|
|
|
fe0dde |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlink/rule.yml
|
|
|
fe0dde |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlink/rule.yml
|
|
|
fe0dde |
@@ -38,7 +38,7 @@ references:
|
|
|
fe0dde |
nist-csf: DE.AE-3,DE.AE-5,DE.CM-1,DE.CM-3,DE.CM-7,ID.SC-4,PR.AC-3,PR.MA-2,PR.PT-1,PR.PT-4,RS.AN-1,RS.AN-4
|
|
|
fe0dde |
ospp: FAU_GEN.1.1.c
|
|
|
fe0dde |
pcidss: Req-10.2.7
|
|
|
fe0dde |
- srg: SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00210,SRG-OS-000468-GPOS-00212,SRG-OS-000392-GPOS-00172
|
|
|
fe0dde |
+ srg: SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00211,SRG-OS-000468-GPOS-00212,SRG-OS-000392-GPOS-00172
|
|
|
fe0dde |
vmmsrg: SRG-OS-000466-VMM-001870,SRG-OS-000468-VMM-001890
|
|
|
fe0dde |
stigid@rhel7: RHEL-07-030910
|
|
|
fe0dde |
isa-62443-2013: 'SR 1.13,SR 2.10,SR 2.11,SR 2.12,SR 2.6,SR 2.8,SR 2.9,SR 3.1,SR 3.5,SR 3.8,SR 4.1,SR 4.3,SR 5.1,SR 5.2,SR 5.3,SR 6.1,SR 6.2,SR 7.1,SR 7.6'
|
|
|
fe0dde |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml
|
|
|
fe0dde |
index 71ba90c2ce..74360cecaa 100644
|
|
|
fe0dde |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml
|
|
|
fe0dde |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml
|
|
|
fe0dde |
@@ -38,7 +38,7 @@ references:
|
|
|
fe0dde |
nist-csf: DE.AE-3,DE.AE-5,DE.CM-1,DE.CM-3,DE.CM-7,ID.SC-4,PR.AC-3,PR.MA-2,PR.PT-1,PR.PT-4,RS.AN-1,RS.AN-4
|
|
|
fe0dde |
ospp: FAU_GEN.1.1.c
|
|
|
fe0dde |
pcidss: Req-10.2.7
|
|
|
fe0dde |
- srg: SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00210,SRG-OS-000468-GPOS-00212,SRG-OS-000392-GPOS-00172
|
|
|
fe0dde |
+ srg: SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00211,SRG-OS-000468-GPOS-00212,SRG-OS-000392-GPOS-00172
|
|
|
fe0dde |
vmmsrg: SRG-OS-000466-VMM-001870,SRG-OS-000468-VMM-001890
|
|
|
fe0dde |
stigid@rhel7: RHEL-07-030920
|
|
|
fe0dde |
isa-62443-2013: 'SR 1.13,SR 2.10,SR 2.11,SR 2.12,SR 2.6,SR 2.8,SR 2.9,SR 3.1,SR 3.5,SR 3.8,SR 4.1,SR 4.3,SR 5.1,SR 5.2,SR 5.3,SR 6.1,SR 6.2,SR 7.1,SR 7.6'
|