6.3.1 Ensure AIDE is installed

Audit

Run the following command to verify aide is installed:

# dpkg-query -s aide &>/dev/null && echo "aide is installed"
aide is installed

Run the following command to verify aide-common is installed:

# dpkg-query -s aide-common &>/dev/null && echo "aide-common is installed"
aide-common is installed

Remediation

Install AIDE using the appropriate package manager or manual installation:

# apt install aide aide-common

Configure AIDE as appropriate for your environment. Consult the AIDE documentation for options.

Run the following commands to initialize AIDE:

# aideinit
# mv /var/lib/aide/aide.db.new /var/lib/aide/aide.db