SV-268282r1038736_rule
V-268282
SRG-APP-000381-NDM-000305
HYCU-ND-000750
CAT II
10
Log in to the HYCU VM console and load the STIG audit rules by using the following commands:
1. cp /usr/share/audit/sample-rules/10-base-config.rules /usr/share/audit/sample-rules/30-stig.rules /usr/share/audit/sample-rules/31-privileged.rules /usr/share/audit/sample-rules/99-finalize.rules /etc/audit/rules.d/
2. augenrules --load
Check the contents of the "/var/log/audit/audit.log" file.
Verify the audit log contains records showing when unsuccessful login attempts occur.
If the audit log is not configured or does not have required contents, this is a finding.
HYCU also maintains Event (Audit) information in the "HYCU Web UI Events" menu. Log in with incorrect credentials and check the HYCU Events.
If the HYCU event of category "SECURITY" and status "Warning" is not logged, this is a finding.
V-268282
False
HYCU-ND-000750
Check the contents of the "/var/log/audit/audit.log" file.
Verify the audit log contains records showing when unsuccessful login attempts occur.
If the audit log is not configured or does not have required contents, this is a finding.
HYCU also maintains Event (Audit) information in the "HYCU Web UI Events" menu. Log in with incorrect credentials and check the HYCU Events.
If the HYCU event of category "SECURITY" and status "Warning" is not logged, this is a finding.
M
5660