RHEL 9 audispd-plugins package must be installed.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-258175 | SRG-OS-000342-GPOS-00133 | RHEL-09-653130 | SV-258175r1045310_rule | 2026-02-05 | 2 |
Description
"audispd-plugins" provides plugins for the real-time interface to the audit subsystem, "audispd". These plugins can do things like relay events to remote machines or analyze events for suspicious behavior.
ℹ️ Check
Verify that RHEL 9 has the audispd-plugins package installed with the following command:
$ dnf list --installed audispd-plugins
Example output:
audispd-plugins.x86_64 3.0.7-101.el9_0.2
If the "audispd-plugins" package is not installed, this is a finding.
✔️ Fix
The audispd-plugins package can be installed with the following command:
$ sudo dnf install audispd-plugins