AlmaLinux OS 9 audispd-plugins package must be installed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-269509	ALMA-09-052160	SV-269509r1050392_rule		Medium

Description

"audispd-plugins" provides plugins for the real-time interface to the audit subsystem, "audispd". These plugins can do things like relay events to remote machines or analyze events for suspicious behavior.

STIG	Date
CloudLinux AlmaLinux OS 9 Security Technical Implementation Guide	2025-05-22

Details

Check Text (C-73540r1049888_chk)

Verify that AlmaLinux OS 9 has the audispd-plugins package for installed with the following command:

$ dnf list --installed audispd-plugins

audispd-plugins.x86_64 3.0.7-103.el9 @anaconda

If the "audispd-plugins" package is not installed, this is a finding.

Fix Text (F-73441r1048904_fix)

The audispd-plugins package can be installed with the following command:

$ dnf install audispd-plugins