STIGQter: STIG Summary: SPEC Innovations Innoslate 4.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 08 Sep 2022:

Innoslate must generate audit records when DoD required events occur.

DISA Rule

SV-254096r845264_rule

Vulnerability Number

V-254096

Group Title

SRG-APP-000495

Rule Version

SPEC-IN-001130

Severity

CAT II

CCI(s)

• CCI-000172 - Generate audit records for the event types defined in AU-2 c that include the audit record content defined in AU-3.

Weight

10

Fix Recommendation

1. Locate the logging.properties file in the following directory: Innoslate\apache-tomcat\conf.
2. Modify lines 25, 29, 33, and 41 to be set to DEBUG or VERBOSE as needed.

Check Contents

1. Locate the logging.properties file in the following directory: Innoslate\apache-tomcat\conf.
2. Modify lines 25, 29, 33, and 41 to be set to DEBUG or VERBOSE as needed.
3. If after a service restart the logs do not change, this is a finding.

Vulnerability Number

V-254096

Documentable

False

Rule Version

SPEC-IN-001130

Severity Override Guidance

1. Locate the logging.properties file in the following directory: Innoslate\apache-tomcat\conf.
2. Modify lines 25, 29, 33, and 41 to be set to DEBUG or VERBOSE as needed.
3. If after a service restart the logs do not change, this is a finding.

Check Content Reference

M

Target Key

5481