Ensure AIDE is installed

MediumLevel 1Automatedfreebsd

Description

Advanced Intrusion Detection Environment (AIDE) is an intrusion detection tool that uses predefined rules to check the integrity of files and directories in the FreeBSD operating system. AIDE has its own database for this purpose. aide takes a snapshot of files and directories, including modification times, permissions, and file hashes. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.

How it is checked

Audit method: Shell command

shell

command -v pkg >/dev/null 2>&1 || exit 1; q=$(pkg query -g %n 'aide*' 2>/dev/null); [ -n "$q" ] && echo compliant || echo "aide is not installed"

Expected output: compliant

How it is fixed

Fix method: Guidance or infrastructure patch

pkg install aide; then initialise the database: aide --init

Properties

Operating systems: Any
Tags: freebsdservices
Reference: CIS FreeBSD 14 Benchmark v1.0.1 - 5.3.1 Ensure AIDE is installed

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target freebsd