TOC & Recently Viewed

Recently Viewed Topics

Unix Compliance Check Global Settings

This section describes global settings for Unix audit files, which you can set in Nessus or Tenable.io. If you have multiple audit files in the scan or policy, the global setting applies to all Unix audit files. If you want to use different settings for different audits, create a separate scan or policy for each one.

To access global settings in Nessus or Tenable.io:

  1. In a scan or policy, open the Compliance tab.
  2. In the Categories drop-down box, select Unix.

    Nessus displays a list of Unix audit files, or you can upload a custom Unix audit file.

  3. Select any Unix audit file to add to the scan or policy.
  4. Edit the Global Settings.

Docker Scan Scope

This setting controls whether the plugin runs audits against the host, docker containers on the host, or both.

Setting Description
Only scan host (default)

Evaluates audit files against the host only.

When scanning non-docker hosts, performance is not negatively impacted.

Only scan containers

Evaluates audit files against all active docker containers.

Note: If you use this setting and run a scan against a non-docker host, Nessus does not scan the host.

Scan host and containers Evaluates audit files against both the host and all active docker containers.

Copyright © 2019 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trademarks of Tenable, Inc.. Tenable.sc, Lumin, Assure, and the Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective owners.