Revision 1.2

1.1.1.6 Ensure squashfs kernel module is not available
1.1.1.7 Ensure udf kernel module is not available
1.1.1.8 Ensure usb-storage kernel module is not available
1.7.6 Ensure GDM automatic mounting of removable media is disabled
1.7.7 Ensure GDM disabling automatic mounting of removable media is not overridden
3.2.1 Ensure dccp kernel module is not available
3.2.2 Ensure tipc kernel module is not available
3.2.3 Ensure rds kernel module is not available
3.2.4 Ensure sctp kernel module is not available
5.2.3.10 Ensure successful file system mounts are collected
5.2.3.13 Ensure file deletion events by users are collected
5.2.3.15 Ensure successful and unsuccessful attempts to use the chcon command are recorded
5.2.3.16 Ensure successful and unsuccessful attempts to use the setfacl command are recorded
5.2.3.17 Ensure successful and unsuccessful attempts to use the chacl command are recorded
5.2.3.18 Ensure successful and unsuccessful attempts to use the usermod command are recorded
5.2.3.19 Ensure kernel module loading unloading and modification is collected
5.2.3.3 Ensure events that modify the sudo log file are collected
5.2.3.6 Ensure use of privileged commands are collected
5.2.3.7 Ensure unsuccessful file access attempts are collected
5.2.3.9 Ensure discretionary access control permission modification events are collected
5.2.4.2 Ensure audit log files are mode 0640 or less permissive
5.2.4.3 Ensure only authorized users own audit log files