← Back to Nutanix AOS 5.20.x OS Security Technical Implementation Guide

V-254163

CAT II (Medium)

Nutanix AOS must initiate session audits at system start-up.

Rule ID

SV-254163r991555_rule

STIG

Nutanix AOS 5.20.x OS Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-001464

Discussion

If auditing is enabled late in the start-up process, the actions of some start-up processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.

Check Content

Determine if auditing is active by issuing the following command:

$ sudo systemctl is-active auditd.service
active

If the "auditd" status is not active, this is a finding.

Fix Text

Configure the audit service to be active and start automatically with the system at startup. The Audit service is protected and restricted to allow access or modifications only from the root account.
$ sudo su -
# systemctl start auditd.service