Ensure the default plugins for the audit dispatcher are Installed
An XCCDF Rule
Description
The audit-audispd-plugins package should be installed.
Rationale
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.
- ID
- xccdf_org.ssgproject.content_rule_package_audit-audispd-plugins_installed
- Severity
- Medium
- References
- Updated
Remediation - Puppet
include install_audit-audispd-plugins
class install_audit-audispd-plugins {
package { 'audit-audispd-plugins':
ensure => 'installed',
}
Remediation - OS Build Blueprint
[[packages]]
name = "audit-audispd-plugins"
version = "*"
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel-default; then
zypper install -y "audit-audispd-plugins"
else
Remediation - Ansible
- name: Gather the package facts
package_facts:
manager: auto
tags:
- CCE-85613-8
- DISA-STIG-SLES-15-030670