diff --git a/controls/stig_slmicro5.yml b/controls/stig_slmicro5.yml index 13b9a8035fd..f05e006bce7 100644 --- a/controls/stig_slmicro5.yml +++ b/controls/stig_slmicro5.yml @@ -1715,8 +1715,9 @@ controls: title: SLEM 5 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow. - rules: [] - status: pending + rules: + - audit_rules_usergroup_modification_shadow + status: automated - id: SLEM-05-654150 levels: diff --git a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_usergroup_modification_shadow/rule.yml b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_usergroup_modification_shadow/rule.yml index 8898621ec47..7b9cdc9a33e 100644 --- a/linux_os/guide/auditing/auditd_configure_rules/audit_rules_usergroup_modification_shadow/rule.yml +++ b/linux_os/guide/auditing/auditd_configure_rules/audit_rules_usergroup_modification_shadow/rule.yml @@ -33,6 +33,7 @@ identifiers: cce@rhel10: CCE-88637-4 cce@sle12: CCE-83122-2 cce@sle15: CCE-85579-1 + cce@slmicro5: CCE-93658-3 references: cis-csc: 1,11,12,13,14,15,16,18,19,2,3,4,5,6,7,8,9 diff --git a/shared/references/cce-slmicro5-avail.txt b/shared/references/cce-slmicro5-avail.txt index 645482d93ef..5dc3bf82cc0 100644 --- a/shared/references/cce-slmicro5-avail.txt +++ b/shared/references/cce-slmicro5-avail.txt @@ -16,7 +16,6 @@ CCE-93638-5 CCE-93639-3 CCE-93640-1 CCE-93641-9 -CCE-93658-3 CCE-93659-1 CCE-93661-7 CCE-93662-5