{"id":3651,"date":"2019-02-24T09:36:29","date_gmt":"2019-02-24T04:06:29","guid":{"rendered":"https:\/\/pheonixsolutions.com\/blog\/?p=3651"},"modified":"2019-02-24T09:49:19","modified_gmt":"2019-02-24T04:19:19","slug":"how-to-secure-a-server-using-auditd-service","status":"publish","type":"post","link":"https:\/\/pheonixsolutions.com\/blog\/how-to-secure-a-server-using-auditd-service\/","title":{"rendered":"HOW TO SECURE A SERVER USING AUDITD SERVICE"},"content":{"rendered":"\n<h4 class=\"wp-block-heading\">HOW TO SECURE A SERVER USING AUDITD SERVICE<\/h4>\n\n\n\n<h4 class=\"wp-block-heading\">DATE POSTED: 24\/02\/2019<\/h4>\n\n\n\n<h4 class=\"wp-block-heading\">Introduction on  <strong>Auditd service<\/strong> <\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Auditd<\/strong> is a  key component which plays major role in <strong>Linux Auditing System<\/strong>. It is responsible for writing audit records to disk. You can configure audit rules, view logs and customize it based on your requirements.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Importance of Auditd<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"> Auditd allows you to closely monitor every activity in the server and  <br>helps in providing valuable insights about server performance .<\/p>\n\n\n\n<ul class=\"wp-block-gallery columns-1 is-cropped wp-block-gallery-1 is-layout-flex wp-block-gallery-is-layout-flex\"><li class=\"blocks-gallery-item\"><figure><img fetchpriority=\"high\" decoding=\"async\" width=\"300\" height=\"272\" src=\"https:\/\/pheonixsolutions.com\/blog\/wp-content\/uploads\/2019\/02\/sec-2.png\" alt=\"\" data-id=\"3657\" data-link=\"https:\/\/pheonixsolutions.com\/blog\/?attachment_id=3657\" class=\"wp-image-3657\"\/><\/figure><\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">How to enable Auditid service in centos-7<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"> Audit system uses two packages:&nbsp;<strong>audit and audit-libs<\/strong>.&nbsp; <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Step 1 :  <\/strong><br>If you want to install audit, you can use the following command<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># sudo yum install audit<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Step 2:<\/strong><br> You can check if audit is installed on your server using the command<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># sudo yum list audit audit-libs<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Step 3:<\/strong><br> To <strong>enable<\/strong> auditd <br><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code> systemctl enable auditd.service<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Step 4:<\/strong><br>After enabled, you can <strong>start the service<\/strong> using command <\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl start auditd.service<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Step 5:<\/strong><br>You can configure auditd-related information such as num_logs, max_log_file in the file <strong>\/etc\/audit\/auditd.conf.<\/strong> <\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># nano  \/etc\/audit\/auditd.conf<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">For your reference , here is the sample snapshot of auditd.conf- <\/p>\n\n\n\n<ul class=\"wp-block-gallery columns-1 is-cropped wp-block-gallery-2 is-layout-flex wp-block-gallery-is-layout-flex\"><li class=\"blocks-gallery-item\"><figure><img decoding=\"async\" width=\"544\" height=\"576\" src=\"https:\/\/pheonixsolutions.com\/blog\/wp-content\/uploads\/2019\/02\/sec1.png\" alt=\"\" data-id=\"3653\" data-link=\"https:\/\/pheonixsolutions.com\/blog\/?attachment_id=3653\" class=\"wp-image-3653\" srcset=\"https:\/\/pheonixsolutions.com\/blog\/wp-content\/uploads\/2019\/02\/sec1.png 544w, https:\/\/pheonixsolutions.com\/blog\/wp-content\/uploads\/2019\/02\/sec1-283x300.png 283w\" sizes=\"(max-width: 544px) 100vw, 544px\" \/><\/figure><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"> And that\u2019s it! Your server is now secure by its features.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Thanks for using&nbsp;<a href=\"https:\/\/pheonixsolutions.com\/\">pheonix solutions<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You find this tutorial helpful? Share with your friends to keep it alive.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>HOW TO SECURE A SERVER USING AUDITD SERVICE DATE POSTED: 24\/02\/2019 Introduction on Auditd service Auditd is a key component [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[1022],"tags":[562,563,564,561,260],"class_list":["post-3651","post","type-post","status-publish","format-standard","hentry","category-web-architecture","tag-auditd","tag-auditd-service","tag-enable-auditd","tag-secure","tag-server-hardening","psol-cat-web-architecture"],"jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/phn2x7-WT","jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/3651","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/comments?post=3651"}],"version-history":[{"count":0,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/3651\/revisions"}],"wp:attachment":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/media?parent=3651"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/categories?post=3651"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/tags?post=3651"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}