Detections
Analytics

5.2.1.1 Ensure audit is installed

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

auditd is the userspace component to the Linux Auditing System. It's responsible for writing audit records to the disk.

The capturing of system events provides system administrators with information to allow them to determine if unauthorized access to their system is occurring.

Solution

Run the following command to install audit and audit-libs :

# yum install audit audit-libs

See Also

https://workbench.cisecurity.org/benchmarks/15963

Item Details

References: CSCv7|6.2, CSCv7|6.3

Plugin: Unix

Control ID: 83c33b401f432e455a0319163a1598dc654f218df15036739492c56988dffa5a