The audit-audispd-plugins must be installed on the SUSE operating system.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-77301 | SLES-12-020070 | SV-91997r1_rule | Medium |
| Description |
|---|
| Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity. |
| STIG | Date |
|---|---|
| SLES 12 Security Technical Implementation Guide | 2018-09-27 |
Details
| Check Text ( C-76857r1_chk ) |
|---|
| Verify that the "audit-audispd-plugins" package is installed on the SUSE operating. Check that the "audit-audispd-plugins" package is installed on the SUSE operating system with the following command: # zypper se audit-audispd-plugins If the "audit-audispd-plugins" package is not installed, this is a finding. |
| Fix Text (F-83943r1_fix) |
|---|
| Install the "audit-audispd-plugins" package on the SUSE operating system by running the following command: # sudo zypper install audit-audispd-plugins |