ansible-hardening/doc/metadata/rhel6/V-38637.rst

416 B

---id: V-38637 status: implemented tag: auditd ---

The auditd package is verified with debsums in Ubuntu and with rpm in CentOS. The playbook will fail immediately if any of the files from the auditd package have been altered. This could be the sign of a system compromise.

Note

If the debsums package isn't installed on Ubuntu, the Ansible task will install it during the playbook run.