Skip to content

6.2.1.1 Ensure auditd packages are installed

Audit#

Run the following command and verify auditd is installed: 

# dpkg-query -s auditd &>/dev/null && echo auditd is installed
auditd is installed

Run the following command to verify audispd-plugins is installed: 

# dpkg-query -s audispd-plugins &>/dev/null && echo audispd-plugins is installed
audispd-plugins is installed

Remediation#

Run the following command to Install auditd and audispd-plugins 

# apt install auditd audispd-plugins