configure ipa for compliance on stig id: RHEL-07-030871, RHEL-07-030872,...

configure ipa for compliance on stig id: RHEL-07-030871, RHEL-07-030872, RHEL-07-030873, RHEL-07-030874, RHEL-07-030819, RHEL-07-030821

apps/public/ipa/stig/audit.rules

@@ -85,6 +85,10 @@
 -a always,exit -F arch=b64 -S unlink -F auid>=1000 -F auid!=4294967295 -F key=delete
 -a always,exit -F arch=b32 -S unlinkat -F auid>=1000 -F auid!=4294967295 -F key=delete
 -a always,exit -F arch=b64 -S unlinkat -F auid>=1000 -F auid!=4294967295 -F key=delete
+-a always,exit -F arch=b32 -S create_module -k module-change
+-a always,exit -F arch=b64 -S create_module -k module-change
+-a always,exit -F arch=b32 -S finit_module -k module-change
+-a always,exit -F arch=b64 -S finit_module -k module-change
 
 -w /etc/sudoers -p wa -k privileged-actions
 -w /etc/sudoers.d/ -p wa -k privileged-actions
@@ -92,3 +96,7 @@
 -w /var/log/tallylog -p wa -k logins
 -w /var/run/faillock -p wa -k logins
 -w /var/log/lastlog -p wa -k logins
+-w /etc/group -p wa -k identity
+-w /etc/gshadow -p wa -k identity
+-w /etc/shadow -p wa -k identity
+-w /etc/security/opasswd -p wa -k identity

apps/public/ipa/stig/hash

 8d07b7524029c08b0427aca69dd8bdadec6fbab78282f7dc17a0ac4443eb52bd94831b54506e513a0fa9a7e45e95fc6c405cb2f35fd4bc34cd2f08eb26e96298  10-sysctl.conf
 699c5d919fd49ebf2bbe62a74ee89f53628008c455998e891e9fa97a197c3e29c2f8ec8f77b627d5f481403f01d24bf3904ac3fed7c1da0efca988bbe873181d  alerts.sh
-94b1734e193e96aab574b54b6590a5cbcccc9ec2ba6d7a46bbff18528ac2096a41b67e6b79e66ff47592907777e595efeac31e60e334e4d5fdd49a0defb81755  audit.rules
+d608658512a81e6ec19540057cb333467e9312d19c2e6bffad7991c94366404004c3d890be41179b9257adf80e35b15ea92c8ed5d3c187cb095ef8a07f7fd501  audit.rules
 ab0fe84a8a4e906d731a9a79cd92c4c7c21de2f3a1d80af66c1d24511f14cac73a0005e1b6d63a2b3c838b52fd91219c3efbf5a2da0b385203b02ef615e53902  limits.conf
 d1a65fa8f01407d43fb4bfc416a8c4a76522c607f3463e574bb1958360e437c461e8a8abf48ed33414d4687eef66e337d321e7118004ab2cb88a666f152503ec  login.defs
 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e  password-auth-ac