0047-libsbin-del-/sbin Directory Files Deleted¶

Rule ID¶

• 0047-libsbin-del

Category¶

• system

Level¶

• warn

Compatible Versions¶

• Linux

Description¶

• Monitors whether files under the /sbin directory on the host have been deleted.

Scan Frequency¶

• disable

Rationale¶

• The /sbin directory contains executable files for essential system commands. If these files are deleted, the system may fail to operate normally.

Risk Items¶

• Functionality unavailable

Audit Method¶

• None

Remediation¶

• If file deletion is detected under the /sbin directory, verify whether the deleted files are critical system commands.

Impact¶

• None

Default Value¶

• None

References¶

• None

CIS Controls¶

• None