Install fapolicyd Package
An XCCDF Rule
Description
The fapolicyd package can be installed with the following command:
$ sudo yum install fapolicyd
Rationale
fapolicyd (File Access Policy Daemon)
implements application whitelisting to decide file access rights.
- ID
- xccdf_org.ssgproject.content_rule_package_fapolicyd_installed
- Severity
- Medium
- References
- Updated
Remediation - Puppet
include install_fapolicyd
class install_fapolicyd {
package { 'fapolicyd':
ensure => 'installed',
}
Remediation - Ansible
- name: Gather the package facts
package_facts:
manager: auto
tags:
- NIST-800-53-CM-6(a)
- NIST-800-53-SI-4(22)
Remediation - OS Build Blueprint
[[packages]]
name = "fapolicyd"
version = "*"
Remediation - Anaconda Pre-Install Instructions
package --add=fapolicyd
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel; then
if ! rpm -q --quiet "fapolicyd" ; then
yum install -y "fapolicyd"
fi