STIGQter: STIG Summary: Riverbed NetIM OS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

Ubuntu OS must configure AIDE to perform file integrity checking on the file system.

DISA Rule

SV-275670r1148060_rule

Vulnerability Number

V-275670

Group Title

SRG-OS-000445-GPOS-00199

Rule Version

RIIM-OS-651015

Severity

CAT II

CCI(s)

• CCI-002696 - Verify correct operation of organization-defined security functions.

Weight

10

Fix Recommendation

Initialize AIDE (this will take a few minutes):

$ sudo aideinit
Running aide --init...

Example output:

Start timestamp: 2024-04-01 04:20:00 +1300 (AIDE 0.17.4)
AIDE initialized database at /var/lib/aide/aide.db.new
Ignored e2fs attributes: EIh

Number of entries: 146185

---------------------------------------------------
The attributes of the (uncompressed) database(s):
---------------------------------------------------

/var/lib/aide/aide.db.new
SHA256 : UrYbC/KBOJcs8zKcSlKoifnnoPK66DEC
Aw6odu/BpgY=
SHA512 : ezENbbuh937SPWvtsdjRzy3i47XjLg7j
L3UGmr0EcgY6u8rczxgbn2RuwJfrIpef
0c1qMNobzrLXyDnnqEqAqw==
RMD160 : yBq2xio+g5ne4kvZzzMZ2v+EO9w=
TIGER : GkJ/xkzJGu/aSQqk9A5LN271IOAQC3d0
CRC32 : g/beXA==
HAVAL : zZm220YZiGna2edJ6Gi0rPv16AlpqeHB
y/XLB3hIPEY=
WHIRLPOOL : k6veoXavJ/BH9L125pCYAfTB8w5ZJkdC
DvVmYS0+cgmg7M0y/S2v42FNCEJ993mc
3kZMXJR/VVmwKg/7ntGixQ==
GOST : psjiyix6mJlNsE984D0NwbfgBmB0ETGl
/R4PNvm/wKg=

End timestamp: 2024-04-01 04:29:16 +1300 (run time: 9m 16s)

Check Contents

Verify that Advanced Intrusion Detection Environment (AIDE) is configured and operating correctly by using the following command (this will take a few minutes):

Note: If AIDE is not installed, this requirement is not applicable.

$ sudo aide -c /etc/aide/aide.conf --check

Example output:

Start timestamp: 2024-04-01 04:20:00 +1300 (AIDE 0.17.4)
AIDE found differences between database and filesystem!!
Ignored e2fs attributes: EIh
...

If AIDE is being used to perform file integrity checks but the command fails, this is a finding.

Vulnerability Number

V-275670

Documentable

False

Rule Version

RIIM-OS-651015

Severity Override Guidance

Verify that Advanced Intrusion Detection Environment (AIDE) is configured and operating correctly by using the following command (this will take a few minutes):

Note: If AIDE is not installed, this requirement is not applicable.

$ sudo aide -c /etc/aide/aide.conf --check

Example output:

Start timestamp: 2024-04-01 04:20:00 +1300 (AIDE 0.17.4)
AIDE found differences between database and filesystem!!
Ignored e2fs attributes: EIh
...

If AIDE is being used to perform file integrity checks but the command fails, this is a finding.

Check Content Reference

M

Target Key

5706