From Apple OS X 10.8 (Mountain Lion) Workstation STIG
Part of SRG-OS-000061
Associated with: CCI-000166
Non-repudiation of actions taken is required in order to maintain integrity. To do this, we will prevent users from modifying the audit logs.
To check the ownership of the audit log files, run the following command: sudo -s ls -dn `sudo grep "^dir" /etc/security/audit_control | awk -F: '{print $2}'`| awk '{ print $3 ":" $4 }' The results should be "0:0". This command shows the UID and GID of the audit logs directory. With the first "0" being root, and the second "0" being wheel. If there is any other result, this is a finding.
If the audit log folder is not owned by root:wheel, run the following command: sudo chown root:wheel /var/audit
Lavender hyperlinks in small type off to the right (of CSS
class id
, if you view the page source) point to
globally unique URIs for each document and item. Copy the
link location and paste anywhere you need to talk
unambiguously about these things.
You can obtain data about documents and items in other
formats. Simply provide an HTTP header Accept:
text/turtle
or
Accept: application/rdf+xml
.
Powered by sagemincer