cis-ubuntu1204-v110-8-3-1

name	cis-ubuntu1204-v110-8-3-1
description	Install AIDE
category	cis-os-hardening
version	1.1.0
author	cyberstrike-official
tags	["cis","ubuntu",12.04,"linux","logging","aide","file-integrity","intrusion-detection"]
cis_id	8.3.1
cis_benchmark	CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0
tech_stack	["ubuntu","linux"]
cwe_ids	[]
chains_with	[]
prerequisites	[]
severity_boost	{}

8.3.1 Install AIDE (Scored)

Profile Applicability

• Level 2

Description

In some installations, AIDE is not installed automatically.

Rationale

Install AIDE to make use of the file integrity features to monitor critical files for changes that could affect the security of the system.

Audit Procedure

Using Command Line

Run the following to ensure aide is installed:

dpkg -s aide

Expected Result

Ensure package status is installed ok installed.

Remediation

Using Command Line

Install AIDE:

apt-get install aide

Initialize AIDE:

aideinit
cp /var/lib/aide/aide.db.new /var/lib/aide/aide.db

Note: The prelinking feature can interfere with AIDE because it alters binaries to speed up their start up times. Run /usr/sbin/prelink -ua to restore the binaries to their prelinked state, thus avoiding false positives from AIDE.

Default Value

AIDE is not installed by default.

References

• CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0

Profile

Level 2 - Scored