Differences

This shows you the differences between two versions of the page.

Link to this comparison view

ubuntu1604:1:3:2 [2017/05/02 13:24] (current)
Line 1: Line 1:
 +====== 1.3.2 Ensure filesystem integrity is regularly checked (Scored) ======
 +=====Profile Applicability=====  ​
 +<​code>​
 +Level 1 - Server ​
 +Level 1 - Workstation
 +</​code>​
 +=====Description=====
 +Periodic checking of the filesystem integrity is needed to detect changes to the filesystem.
 +=====Rationale=====
 +Periodic file checking allows the system administrator to determine on a regular basis if critical files have been changed in an unauthorized fashion.
 +=====Audit===== ​
 +Run the following commands to determine if there is a cron job scheduled to run the aide check.
 +<​Code:​bash>​
 +# crontab -u root -l | grep aide 
 +# grep -r aide /etc/cron.* /​etc/​crontab
 +</​Code>​
 +Ensure a cron job in compliance with site policy is returned.
 +=====Remediation===== ​
 +Run the following command:
 +<​Code:​bash>​
 +# crontab -u root -e
 +</​Code>​
 +Add the following line to the crontab:
 +<​Code:​bash>​
 +0 5 * * * /​usr/​bin/​aide --check
 +</​Code>​
 +=====Notes===== ​
 +The checking in this recommendation occurs every day at 5am. Alter the frequency and time of the checks in compliance with site policy.