Ensure events that modify date and time information are collected – auditctl clock_settime (64-bit) Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – auditctl /etc/localtime Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – clock_settime (32-bit) Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – clock_settime (64-bit) Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – /etc/localtime Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify user/group information are collected – auditctl ‘/etc/group’ Details Record events affecting the group , passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on...
Ensure events that modify user/group information are collected – auditctl ‘/etc/gshadow’ Details Record events affecting the group , passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on...
Ensure events that modify user/group information are collected – auditctl ‘/etc/passwd’ Details Record events affecting the group , passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on...
Ensure events that modify user/group information are collected – auditctl ‘/etc/security/opasswd’ Details Record events affecting the group , passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on...
Ensure events that modify user/group information are collected – auditctl ‘/etc/shadow’ Details Record events affecting the group , passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on...