TMA-ROS1-1.4.1

Ensure AIDE is installed

MediumLevel 1Automatedros

Description

AIDE takes a snapshot of filesystem state including modification times, permissions, and file hashes which can then be used to compare against the current state of the filesystem to detect modifications to the system. The audit requires the aide package (dpkg-query). Host-level control from the CIS ROS Melodic benchmark (Ubuntu 18.04 robot hosts); run as root.

How it is checked

Audit method: Shell command

shell

command -v dpkg-query >/dev/null 2>&1 || exit 1
bad=0
for p in aide; do s=$(dpkg-query -W -f='${Status}' "$p" 2>/dev/null); case "$s" in *' installed') ;; *) echo "$p is not installed"; bad=1 ;; esac; done
[ "$bad" -eq 0 ] && echo compliant

Expected output: compliant

How it is fixed

Fix method: Guidance or infrastructure patch

Install AIDE using the appropriate package manager or manual installation: # apt install aide aide-common Configure AIDE as appropriate for your environment. Consult the AIDE documentation for options. Initialize AIDE: # aideinit

Properties

Operating systems: Any
Tags: rosros1melodicsystem
Reference: CIS ROS Melodic Benchmark v1.0.0 - 1.4.1 Ensure AIDE is installed

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target ros