usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-08-12 07:50:48 +01:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

refactor[rules] Updated check to match ventura

Browse Source 
Updated audit_control_mode_configure check
This commit is contained in:
Bob Gendler
2023-02-10 10:42:12 -05:00
parent 33eb18dc7e
commit 6be121cd61
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rules/audit/audit_control_mode_configure.yaml
View File

@@ -3,7 +3,7 @@ title: "Configure Audit_Control Owner to Mode 440 or Less Permissive"
discussion: |
/etc/security/audit_control _MUST_ be configured so that it is readable only by the root user and group wheel.
check: |
/bin/ls -l /etc/security/audit_control | awk '!/-r--r-----|current|total/{print $1}' | /usr/bin/wc -l | /usr/bin/xargs
/bin/ls -l /etc/security/audit_control | /usr/bin/awk '!/-r--[r-]-----|current|total/{print $1}' | /usr/bin/wc -l | /usr/bin/xargs
result:
integer: 0
fix: |