SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Paid content will be excluded from the download.

Download | Alert*

OVAL

Enable Auditing for Processes Which Start Prior to the Audit Daemon

ID: oval:gov.nist.usgcb.rhel:def:20157	Date: (C)2012-08-24 (M)2022-10-10
Class: COMPLIANCE	Family: unix

Look for argument audit=1 in the kernel line in /boot/grub/grub.conf

Platform:

Red Hat Enterprise Linux 5

Reference: