Detections
Analytics

6.3.2 Ensure filesystem integrity is regularly checked

Information

Periodic checking of the filesystem integrity is needed to detect changes to the filesystem.

Periodic file checking allows the system administrator to determine on a regular basis if critical files have been changed in an unauthorized fashion.

Solution

Run the following command to unmask dailyaidecheck.timer and dailyaidecheck.service :

# systemctl unmask dailyaidecheck.timer dailyaidecheck.service

Run the following command to enable and start dailyaidecheck.timer :

# systemctl --now enable dailyaidecheck.timer

See Also

https://workbench.cisecurity.org/benchmarks/27798

Item Details

Category: ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

References: 800-53|AC-6(9), 800-53|AU-2, 800-53|AU-12, CSCv7|14.9

Plugin: Unix

Control ID: 5d978d5e8b924952ece4142e80320cbae0d53b1fecb8e11cc68715138e6cd96c