How To Install audispd-plugins on Rocky Linux 8
Introduction
In this tutorial we learn how to install audispd-plugins on Rocky Linux 8.
What is audispd-plugins
The audispd-plugins package provides plugins for the real-time interface to the audit system, audispd. These plugins can do things like relay events to remote machines.
We can use yum or dnf to install audispd-plugins on Rocky Linux 8. In this tutorial we discuss both methods but you only need to choose one of method to install audispd-plugins.
Install audispd-plugins on Rocky Linux 8 Using dnf
Update yum database with dnf using the following command.
sudo dnf makecache --refresh
After updating yum database, We can install audispd-plugins using dnf by running the following command:
sudo dnf -y install audispd-plugins
Install audispd-plugins on Rocky Linux 8 Using yum
Update yum database with yum using the following command.
sudo yum makecache --refresh
After updating yum database, We can install audispd-plugins using yum by running the following command:
sudo yum -y install audispd-plugins
How To Uninstall audispd-plugins on Rocky Linux 8
To uninstall only the audispd-plugins package we can use the following command:
sudo dnf remove audispd-plugins
audispd-plugins Package Contents on Rocky Linux 8
/etc/audit/audisp-remote.conf
/etc/audit/plugins.d/au-remote.conf
/etc/audit/plugins.d/syslog.conf
/sbin/audisp-remote
/sbin/audisp-syslog
/usr/lib/.build-id
/usr/lib/.build-id/82
/usr/lib/.build-id/82/1fd9b146a552ed1a412f8b416cc4bf487ec2cf
/usr/lib/.build-id/91
/usr/lib/.build-id/91/63b035c0ffcdf1c1706fd6a1dfab8a33070bb0
/usr/share/man/man5/audisp-remote.conf.5.gz
/usr/share/man/man8/audisp-remote.8.gz
/usr/share/man/man8/audisp-syslog.8.gz
/var/spool/audit
References
Summary
In this tutorial we learn how to install audispd-plugins on Rocky Linux 8 using yum and dnf.