Detections
Analytics

RHEL-09-653130 - RHEL 9 audispd-plugins package must be installed.

Information

"audispd-plugins" provides plugins for the real-time interface to the audit subsystem, "audispd". These plugins can do things like relay events to remote machines or analyze events for suspicious behavior.

Solution

The audispd-plugins package can be installed with the following command:

$ sudo dnf install audispd-plugins

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_9_V2R8_STIG.zip

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4(1), CAT|II, CCI|CCI-001851, Rule-ID|SV-258175r1045310_rule, STIG-ID|RHEL-09-653130, Vuln-ID|V-258175

Plugin: Unix

Control ID: e7b3646ae62815a704b1efb40ae9665ee5c95fba038feb842fe398470706e9d0