STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS must configure AIDE to perform file integrity checking on the file system if installed.

DISA Rule

SV-270650r1155241_rule

Vulnerability Number

V-270650

Group Title

SRG-OS-000445-GPOS-00199

Rule Version

UBTU-24-100110

Severity

CAT II

CCI(s)

CCI-002696 - Verify correct operation of organization-defined security functions.

Weight

Fix Recommendation

Initialize the AIDE package (this may take a few minutes):
$ sudo aideinit
Running aide --init...

The new database will need to be renamed to be read by AIDE:
$ sudo cp -p /var/lib/aide/aide.db.new /var/lib/aide/aide.db

Perform a manual check:
$ sudo aide -c /etc/aide/aide.conf --check

Example output:
...
Start timestamp: 2024-10-30 14:22:38 -0400 (AIDE 0.18.6)
AIDE found differences between database and filesystem!!
...

Done.

Check Contents

Note: If a file integrity tool other than Advanced Intrusion Detection Environment (AIDE) is employed, this requirement is not applicable.

Verify AIDE is configured on the system by performing a manual check:

$ sudo aide -c /etc/aide/aide.conf --check

Example output:
...
Start timestamp: 2024-10-30 14:22:38 -0400 (AIDE 0.18.6)
AIDE found differences between database and filesystem!!
...

If AIDE is being used for system file integrity checking and the command fails, this is a finding.

Vulnerability Number

V-270650

Documentable

False

Rule Version

UBTU-24-100110

Severity Override Guidance

Check Content Reference

Target Key

5673