4.1 Create CIS Audit Class

Information

To group a set of related audit events, the Solaris Audit service provides the ability for sites
to define their own audit classes that contain just those events that the site wants to audit.

To simplify administration, a CIS specific audit class should be created.

Solution

To create the CIS audit class, edit the /etc/security/audit_class file and add the
following entry before the last line of the file-0x0100000000000000-cis-CIS Solaris Benchmark

See Also

https://workbench.cisecurity.org/files/616

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-12

Plugin: Unix

Control ID: 9697f4b114c9a7110fbc51fe98e5987e16b82cd2fe1ce9968f9ee6d301edf792