RHEL 9 audispd-plugins package must be installed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-258175	RHEL-09-653130	SV-258175r926512_rule		Medium

Description
"audispd-plugins" provides plugins for the real-time interface to the audit subsystem, "audispd". These plugins can do things like relay events to remote machines or analyze events for suspicious behavior.

STIG	Date
Red Hat Enterprise Linux 9 Security Technical Implementation Guide	2023-12-01

Details

Check Text ( C-61916r926510_chk )
Verify that RHEL 9 has the audispd-plugins package for installed with the following command: $ sudo dnf list --installed audispd-plugins Example output: audispd-plugins.x86_64 3.0.7-101.el9_0.2 If the "audispd-plugins" package is not installed, this is a finding.

Fix Text (F-61840r926511_fix)
The audispd-plugins package can be installed with the following command: $ sudo dnf install audispd-plugins