remediation for CCE 27243-5, audit log perms