HP 3PAR InForm OS Common Criteria Administrator's Reference (QL226-96586, October 2012)

Operating in Common Criteria Mode 18
Table 5 Mapping of HP 3PAR Storage System Events to ST Requirements
Requirement
Auditable
Event(s)
Additional Audit
Record Content
InServ Event
FAU_GEN.1
The TOE can generate audit
records for events including
starting and stopping the audit
function, administrator
commands, and all other events
identified in this table.
Furthermore, each audit record
identifies the date/time, event
type, outcome of the event,
responsible subject/user, as
well as the additional event-
specific content indicated in this
table.
None None None
FAU_GEN.2
The TOE identifies the
responsible user for each event
based on the specific
administrator or host (identified
by host identifier) that caused
the event.
None None None
FAU_SAR.1
The TOE provides CLI and IMC
interfaces to review of its
internal audit log.
Reading of
information from
the audit records
None The event log will contain a “CLI
command executed” event
naming ‘geteventlog’ as the
command executed. This is true
for both CLI and IMC data
extraction operations.
FAU_SAR.3
The TOE audit review functions
include the ability to search the
stored audit logs using regular
expressions so that, for
example, records resulting from
specific user actions can be
readily identified.
None None None
FAU_STG.1
The TOE doesn’t provide the
ability to clear the audit log
and similarly doesn’t provide
any functions that allow
modification of stored audit
records.
None None None