Installing Auditd on the system

[Premiums]

This tool can be installed by using the apt-get or the wajig facility which are both used for downloading packages on Linux. For the purpose of demonstration let us search and see what the result for the search audits comes:


wajig search auditd

It says user space tools for security auditing. This is the same thing that we discussed in the intro section.

Use the below command to install auditd on your system:

apt-get install auditd

Confirm whether it is installed successfully or not:

auditctl -l

If a message like this is obtained then auditd is successfully installed. Currently, it is saying ”No Rules”, let us understand that in the next section.