Ensure separate partition exists for /var Details The /var directory is used by daemons and other system services to temporarily store dynamic data. Some directories created...
Ensure separate partition exists for /var/log Details The /var/log directory is used by system services to store log data . Rationale: There are two important reasons...
Ensure separate partition exists for /var/log/audit Details The auditing daemon, auditd , stores log data in the /var/log/audit directory. Rationale: There are two important reasons to...
Ensure separate partition exists for /var/tmp Details The /var/tmp directory is a world-writable directory used for temporary storage by all users and some applications. Rationale: Since...
Ensure session initiation information is collected – auditctl btmp Details Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The...
Ensure session initiation information is collected – auditctl utmp Details Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The...
Ensure session initiation information is collected – btmp Details Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The...
Ensure session initiation information is collected – utmp Details Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The...
Ensure session initiation information is collected – auditctl wtmp Details Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The...
Ensure session initiation information is collected – wtmp Details Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The...