V-38536: The operating system must automatically audit account disabling actions.
---------------------------------------------------------------------------------

In addition to auditing new user and group accounts, these watches will alert
the system administrator(s) to any modifications. Any unexpected users,
groups, or modifications should be investigated for legitimacy.

Details: `V-38536 in STIG Viewer`_.

.. _V-38536 in STIG Viewer: https://www.stigviewer.com/stig/red_hat_enterprise_linux_6/2015-05-26/finding/V-38536

Notes for deployers
~~~~~~~~~~~~~~~~~~~

.. include:: developer-notes/V-38536.rst