Detections
Analytics

OL6-00-000018 - A file integrity baseline must be created.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

For AIDE to be effective, an initial database of 'known-good' information about files must be captured and it should be able to be verified against the installed files.

Solution

Run the following command to generate a new database:

# /usr/sbin/aide --init

By default, the database will be written to the file '/var/lib/aide/aide.db.new.gz'. Storing the database, the configuration file '/etc/aide.conf', and the binary '/usr/sbin/aide' (or hashes of these files), in a secure location (such as on read-only media) provides additional assurance about their integrity. The newly-generated database can be installed as follows:

# cp /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz

To initiate a manual check, run the following command:

# /usr/sbin/aide --check

If this check produces any unexpected output, investigate.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_6_V2R6_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000366, Rule-ID|SV-208800r793585_rule, STIG-ID|OL6-00-000018, STIG-Legacy|SV-73783, STIG-Legacy|V-59353, Vuln-ID|V-208800

Plugin: Unix

Control ID: 72901376cd38d712d38e050a116e85434fadd14138fdc7eabeb852ffc8fff768