Detections
Analytics

1.86 OL09-00-000450

Information

OL 9 must have the audispd-plugins package installed.

GROUP ID: V-271521
RULE ID: SV-271521r1091275

audispd-plugins provides plug-ins for the real-time interface to the audit subsystem, audispd. These plug-ins can do things like relay events to remote machines or analyze events for suspicious behavior.

Solution

The audispd-plugins package can be installed with the following command:

$ sudo dnf install -y audispd-plugins

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4(1), CCI|CCI-001851, Rule-ID|SV-271521r1091275_rule, STIG-ID|OL09-00-000450, Vuln-ID|V-271521

Plugin: Unix

Control ID: 64573afffc6a770061ed459c9011d933911efe907defc5f29c467aef74b8cd10