CCE-90702-2Platform: rhel7,centos7 | Date: (C)2017-06-29 (M)2022-10-10 |
Enable Process Accounting (psacct)
The process accounting service, 'psacct', works with programs
including 'acct' and 'ac' to allow system administrators to view
user activity, such as commands issued by users of the system.
The 'psacct' service can be enabled with the following command:
'$ sudo systemctl enable psacct'
Parameter:
Technical Mechanism:
The 'psacct' service can provide administrators a convenient
view into some user activities. However, it should be noted that the auditing
system and its audit records provide more authoritative and comprehensive
records.
Fix:
#
# Enable psacct.service for all systemd targets
#
systemctl enable psacct.service
#
# Start psacct.service if not currently running
#
systemctl start psacct.service
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:31116 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:30393 |