BaselineWatch
Desk

RHEL-09-653130 RHEL 9 audispd-plugins package must be installed.

DISA STIG library V2R10
All changes in this version
first version loaded CAT II

Maps to AU-4(1) via CCI-001851

Title

RHEL 9 audispd-plugins package must be installed.

Control

Verify that RHEL 9 has the audispd-plugins package installed with the following command: $ dnf list --installed audispd-plugins Example output: audispd-plugins.x86_64 3.0.7-101.el9_0.2 If the "audispd-plugins" package is not installed, this is a finding.

Discussion

"audispd-plugins" provides plugins for the real-time interface to the audit subsystem, "audispd". These plugins can do things like relay events to remote machines or analyze events for suspicious behavior.

Related controls

CCI-001851

Fix

The audispd-plugins package can be installed with the following command: $ sudo dnf install audispd-plugins