Detections
Analytics

4.1.2 Ensure auditd service is enabled

Information

The capturing of system events provides system administrators with information to allow
them to determine if unauthorized access to their system is occurring.

Solution

Run the following command to enable auditd-# chkconfig auditd on

See Also

https://workbench.cisecurity.org/files/1863

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CSCv6|6.2

Plugin: Unix

Control ID: 25548ed8e1d3488769ea5fc14311b0ea65912aa00b1d01cded93061c8ba5279d