How To Install audispd-plugins-zos on CentOS 8

audispd-plugins-zos is z/OS plugin for the audit event dispatcher

Introduction

In this tutorial we learn how to install audispd-plugins-zos on CentOS 8.

What is audispd-plugins-zos

The audispd-plugins-zos package provides a plugin that will forward all incoming audit events, as they happen, to a configured z/OS SMF (Service Management Facility) database, through an IBM Tivoli Directory Server (ITDS) set for Remote Audit service.

We can use yum or dnf to install audispd-plugins-zos on CentOS 8. In this tutorial we discuss both methods but you only need to choose one of method to install audispd-plugins-zos.

Install audispd-plugins-zos on CentOS 8 Using dnf

Update yum database with dnf using the following command.

sudo dnf makecache --refresh

The output should look something like this:

CentOS Linux 8 - AppStream                                       43 kB/s | 4.3 kB     00:00    
CentOS Linux 8 - BaseOS                                          65 kB/s | 3.9 kB     00:00    
CentOS Linux 8 - ContinuousRelease                               43 kB/s | 3.0 kB     00:00    
CentOS Linux 8 - Extras                                          23 kB/s | 1.5 kB     00:00    
CentOS Linux 8 - FastTrack                                       40 kB/s | 3.0 kB     00:00    
CentOS Linux 8 - HighAvailability                                36 kB/s | 3.9 kB     00:00    
CentOS Linux 8 - Plus                                            24 kB/s | 1.5 kB     00:00    
CentOS Linux 8 - PowerTools                                      50 kB/s | 4.3 kB     00:00    
Extra Packages for Enterprise Linux Modular 8 - x86_64           13 kB/s | 9.2 kB     00:00    
Extra Packages for Enterprise Linux 8 - x86_64                   24 kB/s | 8.5 kB     00:00    
Metadata cache created.

After updating yum database, We can install audispd-plugins-zos using dnf by running the following command:

sudo dnf -y install audispd-plugins-zos

Install audispd-plugins-zos on CentOS 8 Using yum

Update yum database with yum using the following command.

sudo yum makecache --refresh

The output should look something like this:

CentOS Linux 8 - AppStream                                       43 kB/s | 4.3 kB     00:00    
CentOS Linux 8 - BaseOS                                          65 kB/s | 3.9 kB     00:00    
CentOS Linux 8 - ContinuousRelease                               43 kB/s | 3.0 kB     00:00    
CentOS Linux 8 - Extras                                          23 kB/s | 1.5 kB     00:00    
CentOS Linux 8 - FastTrack                                       40 kB/s | 3.0 kB     00:00    
CentOS Linux 8 - HighAvailability                                36 kB/s | 3.9 kB     00:00    
CentOS Linux 8 - Plus                                            24 kB/s | 1.5 kB     00:00    
CentOS Linux 8 - PowerTools                                      50 kB/s | 4.3 kB     00:00    
Extra Packages for Enterprise Linux Modular 8 - x86_64           13 kB/s | 9.2 kB     00:00    
Extra Packages for Enterprise Linux 8 - x86_64                   24 kB/s | 8.5 kB     00:00    
Metadata cache created.

After updating yum database, We can install audispd-plugins-zos using yum by running the following command:

sudo yum -y install audispd-plugins-zos

How To Uninstall audispd-plugins-zos on CentOS 8

To uninstall only the audispd-plugins-zos package we can use the following command:

sudo dnf remove audispd-plugins-zos

audispd-plugins-zos Package Contents on CentOS 8

/etc/audit/plugins.d/audispd-zos-remote.conf
/etc/audit/zos-remote.conf
/sbin/audispd-zos-remote
/usr/lib/.build-id
/usr/lib/.build-id/46
/usr/lib/.build-id/46/3e1373334a220b5a21a2d65ffbe883fe116c39
/usr/share/man/man5/zos-remote.conf.5.gz
/usr/share/man/man8/audispd-zos-remote.8.gz

References

Summary

In this tutorial we learn how to install audispd-plugins-zos on CentOS 8 using yum and dnf.