Detections
Analytics

1.26 AZLX-23-001035

Information

Amazon Linux 2023 audispd-plugins package must be installed.

GROUP ID: V-274019RULE ID: SV-274019r1120045

The "audispd-plugins" package provides plugins for the real-time interface to the audit subsystem, "audispd". These plugins can, for example, relay events to remote machines or analyze events for suspicious behavior.

Solution

Configure Amazon Linux 2023 to have the audispd-plugins package installed.

Install the audispd-plugins package with the following command:

$ sudo dnf install -y audispd-plugins

See Also

https://workbench.cisecurity.org/benchmarks/26107

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4(1), CAT|II, CCI|CCI-001851, Rule-ID|SV-274019r1120045_rule, STIG-ID|AZLX-23-001035, Vuln-ID|V-274019

Plugin: Unix

Control ID: 9b7e03c11d72490cbfae18ff15a220bd9e03991888b756d4d6927badf3456032