Ad more rules for RHEL-09-654065

ComplianceAsCode · Oct 12, 2023 · 6397d5b · 6397d5b
1 parent cddeb48
commit 6397d5b
Show file tree

Hide file tree

Showing 5 changed files with 8 additions and 0 deletions.
diff --git a/controls/stig_rhel9.yml b/controls/stig_rhel9.yml
@@ -3708,6 +3708,10 @@ controls:
             system calls.
         rules:
             - audit_rules_file_deletion_events_rename
+            - audit_rules_file_deletion_events_unlink
+            - audit_rules_file_deletion_events_rmdir
+            - audit_rules_file_deletion_events_renameat
+            - audit_rules_file_deletion_events_unlinkat
         status: automated
 
     -   id: RHEL-09-654070

diff --git a/...igure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml b/...igure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml
@@ -59,6 +59,7 @@ references:
     stigid@ol8: OL08-00-030361
     stigid@rhel7: RHEL-07-030910
     stigid@rhel8: RHEL-08-030361
+    stigid@rhel9: RHEL-09-654065
     stigid@ubuntu2004: UBTU-20-010267
 
 {{{ complete_ocil_entry_audit_syscall(syscall="renameat") }}}

diff --git a/...onfigure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml b/...onfigure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml
@@ -56,6 +56,7 @@ references:
     stigid@ol8: OL08-00-030361
     stigid@rhel7: RHEL-07-030910
     stigid@rhel8: RHEL-08-030361
+    stigid@rhel9: RHEL-09-654065
     stigid@ubuntu2004: UBTU-20-010267
 
 {{{ complete_ocil_entry_audit_syscall(syscall="rmdir") }}}

diff --git a/...nfigure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlink/rule.yml b/...nfigure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlink/rule.yml
@@ -62,6 +62,7 @@ references:
     stigid@ol8: OL08-00-030361
     stigid@rhel7: RHEL-07-030910
     stigid@rhel8: RHEL-08-030361
+    stigid@rhel9: RHEL-09-654065
     stigid@ubuntu2004: UBTU-20-010267
 
 {{{ complete_ocil_entry_audit_syscall(syscall="unlink") }}}

diff --git a/...igure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml b/...igure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml
@@ -59,6 +59,7 @@ references:
     stigid@ol8: OL08-00-030361
     stigid@rhel7: RHEL-07-030910
     stigid@rhel8: RHEL-08-030361
+    stigid@rhel9: RHEL-09-654065
     stigid@ubuntu2004: UBTU-20-010267
 
 {{{ complete_ocil_entry_audit_syscall(syscall="unlinkat") }}}