Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

The Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide (V1 R2) has 391 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

391STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Wed Sep 30 2026

TOSS 5 audispd-plugins package must be installed.

Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

Assessment Title

Rule Text

TOSS 5 audispd-plugins package must be installed.

Description

Discussion Text

"audispd-plugins" provides plugins for the real-time interface to the audit subsystem, "audispd". These plugins can relay events to remote machines or analyze events for suspicious behavior.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-282568

Rule

SV-282568r1200684_rule

Severity

medium

Rule Version

TOSS-05-000410

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify TOSS 5 has the "audispd-plugins" package for installed using the following command:

$ sudo dnf list --installed audispd-plugins

Example output:

audispd-plugins.x86_64          3.0.7-101.el9_0.2

If the "audispd-plugins" package is not installed, this is a finding.

Implementation Procedure

Fix Text

Install the "audispd-plugins" package using the following command:
 
$ sudo dnf install audispd-plugins

STIG check 203 of 391 in the Tri-Lab Operating System Stack (TOSS) 5 STIG checklist

← Previous · V-282567TOSS 5 must take appropriate action when the internal event queue is full.Next · V-282569 →TOSS 5 must act when allocated audit record storage volume reaches 75 percent of the repository maximum audit record storage capacity.