0050-libusrbin-del-/usr/bin Directory Files Deleted
Rule ID
Category
Severity
Compatible Versions
Description
- Monitors whether files under the host directory
/usr/bin are deleted.
Scan Frequency
Rationale
- The
/usr/bin directory contains executable files for essential system commands. If these files are deleted, the system may fail to operate normally.
Risk Items
Audit Method
- If files under the
/sbin directory are detected as deleted, check whether they are critical system commands.
Impact
Default Value
References
CIS Controls