STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS must use a file integrity tool to verify correct operation of all security functions.

DISA Rule

SV-270649r1067136_rule

Vulnerability Number

V-270649

Group Title

SRG-OS-000445-GPOS-00199

Rule Version

UBTU-24-100100

Severity

CAT II

CCI(s)

• CCI-002696 - Verify correct operation of organization-defined security functions.

Weight

10

Fix Recommendation

Install the "AIDE" file integrity package:

$ sudo apt install -y aide

Check Contents

Verify that Advanced Intrusion Detection Environment (AIDE) is installed and verifies the correct operation of all security functions with the following command:

$ dpkg -l | grep aide
ii aide 0.18.6-2build2 amd64 Advanced Intrusion Detection Environment - dynamic binary
ii aide-common 0.18.6-2build2 all Advanced Intrusion Detection Environment - Common files

If AIDE is not installed, ask the system administrator how file integrity checks are performed on the system.

If there is no application installed to perform integrity checks, this is a finding.

Vulnerability Number

V-270649

Documentable

False

Rule Version

UBTU-24-100100

Severity Override Guidance

Verify that Advanced Intrusion Detection Environment (AIDE) is installed and verifies the correct operation of all security functions with the following command:

$ dpkg -l | grep aide
ii aide 0.18.6-2build2 amd64 Advanced Intrusion Detection Environment - dynamic binary
ii aide-common 0.18.6-2build2 all Advanced Intrusion Detection Environment - Common files

If AIDE is not installed, ask the system administrator how file integrity checks are performed on the system.

If there is no application installed to perform integrity checks, this is a finding.

Check Content Reference

M

Target Key

5673