Check: RHEL-06-000016
Red Hat Enterprise Linux 6 STIG:
RHEL-06-000016
(in versions v2 r2 through v1 r14)
Title
A file integrity tool must be installed. (Cat II impact)
Discussion
The AIDE package must be installed if it is to be available for integrity checking.
Check Content
If another file integrity tool is installed, this is not a finding. Run the following command to determine if the "aide" package is installed: # rpm -q aide If the package is not installed, this is a finding.
Fix Text
Install the AIDE package with the command: # yum install aide
Additional Identifiers
Rule ID: SV-217857r603264_rule
Vulnerability ID: V-217857
Group Title: SRG-OS-000363
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000416 |
The organization employs automated mechanisms, per organization-defined frequency, to detect the presence of unauthorized hardware, software, and firmware components within the information system. |
| CCI-001069 |
The organization employs automated mechanisms to detect the presence of unauthorized software on organizational information systems and notify designated organizational officials in accordance with the organization-defined frequency. |
| CCI-001774 |
The organization employs a deny-all, permit-by-exception policy to allow the execution of authorized software programs on the information system. |