Detections
Analytics

1.67 RHEL-10-200662

Information

RHEL 10 must have the "audispd-plugins" package installed.

GROUP ID: V-280995RULE ID: SV-280995r1195383

The "audispd-plugins" package provides plugins for the real-time interface to the audit subsystem, "audispd". These plugins can do such things as relay events to remote machines or analyze events for suspicious behavior.

Solution

Configure RHEL 10 to have the "audispd-plugins" package installed with the following command:

$ sudo dnf -y install audispd-plugins

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4(1), CAT|III, CCI|CCI-001851, Rule-ID|SV-280995r1195383_rule, STIG-ID|RHEL-10-200662, Vuln-ID|V-280995

Plugin: Unix

Control ID: 234dbe20091a527e0056defbfde88028201462c90941db89744850e4352b58c1