Skip to content
ATO Pathways
  Log In

Ensure the default plugins for the audit dispatcher are Installed

An XCCDF Rule

Description

The audit-audispd-plugins package should be installed.

Rationale

Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.

ID
xccdf_org.ssgproject.content_rule_package_audit-audispd-plugins_installed
Severity
Medium
References
Updated



Remediation - Puppet

include install_audispd-plugins

class install_audispd-plugins {
  package { 'audispd-plugins':
    ensure => 'installed',
  }

Remediation - Ansible

- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - DISA-STIG-UBTU-22-653020
  - PCI-DSS-Req-10.5.3

Remediation - OS Build Blueprint


[[packages]]
name = "audispd-plugins"
version = "*"

Remediation - Shell Script

# Remediation is applicable only in certain platforms
if dpkg-query --show --showformat='${db:Status-Status}
' 'kernel' 2>/dev/null | grep -q installed; then

DEBIAN_FRONTEND=noninteractive apt-get install -y "audispd-plugins"