From f77ec2664ac875ee77dd05d86d445c77cee8e5de Mon Sep 17 00:00:00 2001 From: Allen Golbig Date: Mon, 21 Dec 2020 14:28:32 -0500 Subject: [PATCH] minor fixes --- rules/audit/audit_flags_lo_configure.yaml | 2 +- rules/pwpolicy/pwpolicy_minimum_lifetime_enforce.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/audit/audit_flags_lo_configure.yaml b/rules/audit/audit_flags_lo_configure.yaml index f536f17f..80e41b38 100644 --- a/rules/audit/audit_flags_lo_configure.yaml +++ b/rules/audit/audit_flags_lo_configure.yaml @@ -5,7 +5,7 @@ discussion: | Frequently, an attacker that successfully gains access to a system has only gained access to an account with limited privileges, such as a guest account or a service account. The attacker must attempt to change to another user account with normal or elevated privileges in order to proceed. Auditing both successful and unsuccessful attempts to switch to another user account (by way of monitoring login and logout events) mitigates this risk. - The information system monitors and login and logout events. + The information system monitors login and logout events. check: | /usr/bin/grep -Ec "^flags*.lo" /etc/security/audit_control result: diff --git a/rules/pwpolicy/pwpolicy_minimum_lifetime_enforce.yaml b/rules/pwpolicy/pwpolicy_minimum_lifetime_enforce.yaml index 3de4451d..07e02bbe 100644 --- a/rules/pwpolicy/pwpolicy_minimum_lifetime_enforce.yaml +++ b/rules/pwpolicy/pwpolicy_minimum_lifetime_enforce.yaml @@ -22,7 +22,7 @@ fix: | Minimum Password Lifetime policyParameters - policyAttributeMinimumLifetimeHours + policyAttributeMinimumLifetimeHours 24