Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The /etc/security/audit_user file must have mode 0640 or less permissive.
Description
Discussion Text
Audit_user is a sensitive file that, if compromised, would allow a malicious user to select auditing parameters to ignore his sessions. This would allow malicious operations the auditing subsystem would not log for that user.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.