Install the psacct package
An XCCDF Rule
Description
The process accounting service, psacct, works with programs
including acct and ac to allow system administrators to view
user activity, such as commands issued by users of the system.
The psacct package can be installed with the following command:
$ sudo yum install psacct
Rationale
The psacct service can provide administrators a convenient
view into some user activities. However, it should be noted that the auditing
system and its audit records provide more authoritative and comprehensive
records.
- ID
- xccdf_org.ssgproject.content_rule_package_psacct_installed
- Severity
- Low
- References
- Updated
Remediation - Anaconda Pre-Install Instructions
package --add=psacct
Remediation - OS Build Blueprint
[[packages]]
name = "psacct"
version = "*"
Remediation - Ansible
- name: Ensure psacct is installed
package:
name: psacct
state: present
tags:
- NIST-800-53-AU-12(a)
Remediation - Puppet
include install_psacct
class install_psacct {
package { 'psacct':
ensure => 'installed',
}
Remediation - Shell Script
if ! rpm -q --quiet "psacct" ; then
yum install -y "psacct"
fi