0045-libsbin-add-/sbin Directory File Added¶

Rule ID¶

• 0045-libsbin-add

Category¶

• system

Level¶

• warn

Compatible Versions¶

• Linux

Description¶

• Monitors the host /sbin directory for newly added files.

Scan Frequency¶

• disable

Rationale¶

• The /sbin directory contains essential executable files for system-critical commands. If new files are added, it is necessary to determine whether they are legitimate system commands.

Risk Items¶

• Function unavailable

Audit Method¶

• None

Remediation¶

• If files are detected as deleted in the /sbin directory, check whether they are legitimate system commands.

Impact¶

• None

Default Value¶

• None

References¶

• None

CIS Controls¶

• None