documentation_complete: true

title: 'install the auditd service'

description: 'The auditd service should be installed.'

rationale: 'The auditd service is an access monitoring and accounting daemon, watching system calls to audit any access, in comparision with potential local access control policy such as SELinux policy.'

severity: medium

identifiers:
    cce: ""

references:
    anssi: NT28(R50)
