Details

Periodic checking of the filesystem integrity is needed to detect changes to the filesystem. Periodic file checking allows the system administrator to determine on a regular basis if critical files have been changed in an unauthorized fashion.

Solution

Run the following command: # crontab -u root -e Add the following line to the crontab: 0 5 * * * /usr/bin/aide –check

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1866

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

• 800-53|SI-7(1)
• CSCv6|3.5

Source

• Tenable.com/audits