Update ccn profile for OL9

mrkanon · mrkanon · commit 3380c18bb583 · 2025-11-12T09:45:04.000-06:00
Signed-off-by: Armando Acosta &lt;armando.acosta@oracle.com&gt;
diff --git a/controls/ccn_ol9.yml b/controls/ccn_ol9.yml
@@ -52,7 +52,9 @@ controls:
           - advanced
       status: automated
       rules:
-          - audit_rules_session_events
+          - audit_rules_session_events_utmp
+          - audit_rules_session_events_btmp
+          - audit_rules_session_events_wtmp
           - audit_rules_login_events_faillock
           - audit_rules_login_events_lastlog
 
