Skip to content
Log In

Ensure the audit-libs package as a part of audit Subsystem is Installed

An XCCDF Rule

Description

The audit-libs package should be installed.

Rationale

The auditd service is an access monitoring and accounting daemon, watching system calls to audit any access, in comparison with potential local access control policy such as SELinux policy.

ID
xccdf_org.ssgproject.content_rule_package_audit-libs_installed
Severity
Medium
References
Updated

Remediation Templates

script:kickstart

package install audit-libs

An Ansible Snippet

- name: Ensure audit-libs is installed
  package:
    name: audit-libs
    state: present
  when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
  tags:

Anaconda Pre-Install Instructions

package --add=audit-libs

A Puppet Snippet

include install_audit-libs
class install_audit-libs {
  package { 'audit-libs':
    ensure => 'installed',
  }
}

OS Build Blueprint

[[packages]]
name = "audit-libs"
version = "*"

A Shell Script

# Remediation is applicable only in certain platforms
if [ ! -f /.dockerenv ] && [ ! -f /run/.containerenv ]; then
if ! rpm -q --quiet "audit-libs" ; then
    dnf install -y "audit-libs"
fi