linux-audit.redhat.com archive mirror
 help / color / mirror / Atom feed
* No useradd/groupadd in stig.rules?
@ 2013-10-25 16:11 leam hall
  2013-10-25 16:16 ` Steve Grubb
  0 siblings, 1 reply; 2+ messages in thread
From: leam hall @ 2013-10-25 16:11 UTC (permalink / raw)
  To: linux-audit


[-- Attachment #1.1: Type: text/plain, Size: 262 bytes --]

Any reason not to include the below in stig.rules, to cover GEN002750?

## Things that affect adding users/groups
-w /usr/sbin/useradd -p wa -k useradd
-w /usr/sbin/groupadd -p wa -k groupadd

Thanks!

Leam

-- 
Mind on a Mission <http://leamhall.blogspot.com/>

[-- Attachment #1.2: Type: text/html, Size: 413 bytes --]

[-- Attachment #2: Type: text/plain, Size: 0 bytes --]



^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: No useradd/groupadd in stig.rules?
  2013-10-25 16:11 No useradd/groupadd in stig.rules? leam hall
@ 2013-10-25 16:16 ` Steve Grubb
  0 siblings, 0 replies; 2+ messages in thread
From: Steve Grubb @ 2013-10-25 16:16 UTC (permalink / raw)
  To: linux-audit

On Friday, October 25, 2013 12:11:34 PM leam hall wrote:
> Any reason not to include the below in stig.rules, to cover GEN002750?
> 
> ## Things that affect adding users/groups
> -w /usr/sbin/useradd -p wa -k useradd
> -w /usr/sbin/groupadd -p wa -k groupadd

Those programs should create their own events.

-Steve

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2013-10-25 16:16 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-10-25 16:11 No useradd/groupadd in stig.rules? leam hall
2013-10-25 16:16 ` Steve Grubb

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).