CIS Oracle Linux 7 Server L2 v3.0.0

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS Oracle Linux 7 Server L2 v3.0.0

Updated: 7/2/2021

Authority: CIS

Plugin: Unix

Revision: 1.4

Estimated Item Count: 127

Audit Changelog


Revision 1.4 Jul 2, 2021 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.3 Jun 17, 2021 Miscellaneous Metadata updated. References updated.
Revision 1.2 May 10, 2021 Functional Update 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - auditctl b32 EACCES 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - auditctl b32 EPERM 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - auditctl b64 EACCES 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - auditctl b64 EPERM 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - b32 EACCES 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - b32 EPERM 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - b64 EACCES 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - b64 EPERM 4.1.11 Ensure use of privileged commands is collected - auditctl 4.1.11 Ensure use of privileged commands is collected - rules files 4.1.12 Ensure successful file system mounts are collected - 32b mount 4.1.12 Ensure successful file system mounts are collected - auditctl 32b mount 4.1.12 Ensure successful file system mounts are collected - auditctl b64 mount 4.1.12 Ensure successful file system mounts are collected - b64 mount 4.1.13 Ensure file deletion events by users are collected - auditctl b32 delete 4.1.13 Ensure file deletion events by users are collected - auditctl b64 delete 4.1.13 Ensure file deletion events by users are collected - b32 delete 4.1.13 Ensure file deletion events by users are collected - b64 delete 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl b32 chmod 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl b32 chown 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl b32 xattr 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl b64 chmod 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl b64 chown 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl b64 xattr 4.1.9 Ensure discretionary access control permission modification events are collected - b32 chmod 4.1.9 Ensure discretionary access control permission modification events are collected - b32 chown 4.1.9 Ensure discretionary access control permission modification events are collected - b32 xattr 4.1.9 Ensure discretionary access control permission modification events are collected - b64 chmod 4.1.9 Ensure discretionary access control permission modification events are collected - b64 chown 4.1.9 Ensure discretionary access control permission modification events are collected - b64 xattr Miscellaneous Metadata updated. References updated.
Revision 1.1 Oct 5, 2020 Functional Update 1.1.1.4 Ensure mounting of FAT filesystems is limited - EFI 1.1.1.4 Ensure mounting of FAT filesystems is limited - lsmod fat 1.1.1.4 Ensure mounting of FAT filesystems is limited - lsmod msdos 1.1.1.4 Ensure mounting of FAT filesystems is limited - lsmod vfat 1.1.1.4 Ensure mounting of FAT filesystems is limited - modprobe fat 1.1.1.4 Ensure mounting of FAT filesystems is limited - modprobe msdos 1.1.1.4 Ensure mounting of FAT filesystems is limited - modprobe vfat 3.1.1 Disable IPv6 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - auditctl b64 EACCES 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - auditctl b64 EPERM 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - b64 EACCES 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - b64 EPERM 4.1.12 Ensure successful file system mounts are collected - auditctl b64 mount 4.1.12 Ensure successful file system mounts are collected - b64 mount 4.1.13 Ensure file deletion events by users are collected - auditctl b64 delete 4.1.13 Ensure file deletion events by users are collected - b64 delete 4.1.3 Ensure events that modify date and time information are collected - auditctl b64 adjtimex 4.1.3 Ensure events that modify date and time information are collected - auditctl b64 clock_settime 4.1.3 Ensure events that modify date and time information are collected - b64 adjtimex 4.1.3 Ensure events that modify date and time information are collected - b64 clock_settime 4.1.5 Ensure events that modify the system's network environment are collected - auditctl b64 sethostname 4.1.5 Ensure events that modify the system's network environment are collected - b64 sethostname 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl b64 chmod 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl b64 chown 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl b64 xattr 4.1.9 Ensure discretionary access control permission modification events are collected - b64 chmod 4.1.9 Ensure discretionary access control permission modification events are collected - b64 chown 4.1.9 Ensure discretionary access control permission modification events are collected - b64 xattr Miscellaneous Platform check updated.