6.3.2 Ensure filesystem integrity is regularly checked

Audit

Run the following command:

# systemctl list-unit-files | awk '$1~/^dailyaidecheck\.(timer|service)$/{print $1 "\t" $2}'

Example output:

dailyaidecheck.service  static
dailyaidecheck.timer    enabled

Verify dailyaidecheck.timer is enabled and dailyaidecheck.service is either static or enabled. Run the following command to verify dailyaidecheck.timer is active:

# systemctl is-active dailyaidecheck.timer
active

Remediation

Run the following command to unmask dailyaidecheck.timer and dailyaidecheck.service:

# systemctl unmask dailyaidecheck.timer dailyaidecheck.service

Run the following command to enable and start dailyaidecheck.timer:

# systemctl --now enable dailyaidecheck.timer