STIGQter: STIG Summary: Container Platform Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 20 Nov 2020:

The container platform must generate audit record for privileged activities.

DISA Rule

SV-233264r599509_rule

Vulnerability Number

V-233264

Group Title

SRG-APP-000504

Rule Version

SRG-APP-000504-CTR-001280

Severity

CAT II

CCI(s)

• CCI-000172 - The information system generates audit records for the events defined in AU-2 d. with the content defined in AU-3.

Weight

10

Fix Recommendation

Configure the container platform to generate log records for privileged activities.

Check Contents

Review the documentation and configuration guides to determine if the container platform generates log records for privileged activities.

If log records are not generated for privileged activities, this is a finding.

Vulnerability Number

V-233264

Documentable

False

Rule Version

SRG-APP-000504-CTR-001280

Severity Override Guidance

Review the documentation and configuration guides to determine if the container platform generates log records for privileged activities.

If log records are not generated for privileged activities, this is a finding.

Check Content Reference

M

Target Key

5239

Comments