Collect Login and Logout Events- ‘/var/log/lastlog’
Details Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/faillog...
- Home
- Security Hardening
- CIS Ubuntu 12.04 LTS Benchmark L2 V1.1.0
CIS Ubuntu 12.04 LTS Benchmark L2 V1.1.0
Collect Unsuccessful Unauthorized Access Attempts to Files- ’32bit EACCES’
Details Monitor for unsuccessful attempts to access files. The parameters below are associated with system calls that control creation (creat),...Collect Unsuccessful Unauthorized Access Attempts to Files- ’32bit EPERM’
Details Monitor for unsuccessful attempts to access files. The parameters below are associated with system calls that control creation (creat),...Collect Unsuccessful Unauthorized Access Attempts to Files- ’64bit EACCES’
Details Monitor for unsuccessful attempts to access files. The parameters below are associated with system calls that control creation (creat),...Collect Unsuccessful Unauthorized Access Attempts to Files- ’64bit EPERM’
Details Monitor for unsuccessful attempts to access files. The parameters below are associated with system calls that control creation (creat),...Collect Login and Logout Events- ‘/var/log/tallylog’
Details Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/faillog...Collect Session Initiation Information- ‘/var/log/btmp’
Details Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The...Collect Session Initiation Information- ‘/var/log/wtmp’
Details Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The...Collect Session Initiation Information- ‘/var/run/utmp’
Details Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The...Configure Audit Log Storage Size
Details NOTE: Update LOG_FILE_SIZE with the appropriate value forthe local environment. Solution Set the max_log_file parameter in /etc/audit/auditd.confmax_log_file = Note-...