0053-libusrsbin-del - Files in /usr/sbin directory have been deleted¶

Rule ID¶

• 0053-libusrsbin-del

Category¶

• system

Severity¶

• warn

Compatible Versions¶

• Linux

Description¶

• Monitors whether files under the host directory /usr/sbin have been deleted

Scan Frequency¶

• disable

Rationale¶

• The /usr/sbin directory contains executable files for critical system commands. If these files are deleted, the system may fail to operate normally.

Risk Items¶

• Function unavailable

Audit Method¶

• None

Remediation¶

• If file deletion is detected in the /usr/sbin directory, verify whether the affected files are critical system commands.

Impact¶

• None

Default Value¶

• None

References¶

• None

CIS Controls¶

• None