Protogate Freeway 3600 Guide d'installation télécharger pdf (Page 18)

Chapter 3. Requirements Protogate Freeway Requirements Speciﬁcation (SRS)

Notes If the system is not conﬁgured to audit certain activities and write them to an audit log, it is

more difﬁcult to detect and track system compromises and damages incurred during a system

compromise.

3.8.18. GEN002820 - Audit Discretionary Access Control Permission

Modiﬁcations

Summary The audit system must be conﬁgured to audit all discretionary access control permission

modiﬁcations.

Notes If the system is not conﬁgured to audit certain activities and write them to an audit log, it is

more difﬁcult to detect and track system compromises and damages incurred during a system

compromise.

3.8.19. GEN002860 - Audit Logs Rotation

Summary Audit logs must be rotated daily.

Notes Rotate audit logs daily to preserve audit ﬁle system space and to conform to the DoD/DISA

requirement. If it is not rotated daily and moved to another location, then there is more of a

chance for the compromise of audit data by malicious users.

3.8.20. GEN003820 - Remote Login or Shell is Enabled

Summary The rsh daemon must not be running.

Notes The rshd process provides a typically unencrypted, host-authenticated remote access service.

SSH should be used in place of this service.

3.8.21. GEN003840 - The rexec Service is Enabled

Summary The rexec daemon must not be running.

Notes The rexecd process provides a typically unencrypted, host-authenticated remote access

service. SSH should be used in place of this service.

18 Protogate DC-900-2021A

1 2 ... 13 14 15 16 17 18 19 20 21 22 23 ... 34 35

Pas de commentaire

Protogate Freeway 3600 Guide d'installation Page 18