The container platform must audit the execution of privileged functions.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-233164 | SRG-APP-000343-CTR-000780 | SV-233164r961362_rule | CCI-002234 | medium |
| Description | ||||
| Privileged functions within the container platform can be component specific or can envelope the entire container platform. Because of the nature of the commands, it is important to understand what command was executed for either investigation of an incident or for debugging/error correction; therefore, privileged function execution must be audited. | ||||
| STIG | Date | |||
| Container Platform Security Requirements Guide | 2025-05-15 | |||
Related Frameworks
3 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
AC-6(9)
1.00
- DISA · 2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1711 mapping
3.1.7
1.00
- DISA · 2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-002234
1.00
- DISA · 2 · disa_xccdf · related
Details
Check Text (C-233164r961362_chk)
Review container platform documentation and log configuration to verify the application server logs privileged activity.
If the container platform is not configured to log privileged activity, this is a finding.
Fix Text (F-36068r600980_fix)
Configure the container platform to log privileged activity.