1.3.2 Ensure filesystem integrity is regularly checked (Scored) [SecScan]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== 1.3.2 Ensure filesystem integrity is regularly checked (Scored) ======
=====Profile Applicability=====  
<code>
Level 1 - Server 
Level 1 - Workstation
</code>
=====Description=====
Periodic checking of the filesystem integrity is needed to detect changes to the filesystem.
=====Rationale=====
Periodic file checking allows the system administrator to determine on a regular basis if critical files have been changed in an unauthorized fashion.
=====Audit===== 
Run the following commands to determine if there is a ''cron'' job scheduled to run the aide check.
<Code:bash>
# crontab -u root -l | grep aide 
# grep -r aide /etc/cron.* /etc/crontab
</Code>
Ensure a cron job in compliance with site policy is returned.
=====Remediation===== 
Run the following command:
<Code:bash>
# crontab -u root -e
</Code>
Add the following line to the ''crontab'':
<Code:bash>
0 5 * * * /usr/sbin/aide --check
</Code>
=====Notes===== 
The checking in this recommendation occurs every day at 5am. Alter the frequency and time of the checks in compliance with site policy.