DLPX-87293 Add AIDE to appliance

[rasantel]

Problem

For general security hardening, and to comply with the ubuntu CIS benchmark, we should use AIDE (an open source Tripwire alternative) to monitor and report filesystem integrity violations.

Solution

Add the Debian/Ubuntu specific packages aide and aide-common. The former provides the basic aide utility, while the latter provides wrappers to use AIDE with sensible defaults as well as a curated list of AIDE rules for Debian/Ubuntu.

Notes:

1. aide is required by aide-common, but we list aide explicitly as a dependency to make it clear that this is a full AIDE installation
2. aide takes about 20 minutes to run a full filesystem scan, but installing it won't automatically initialize or run it, so this has no performance impact. Configuring AIDE runs will be left for future tasks.

Testing Done

Running appliance build that will have AIDE installed: http://selfservice.jenkins.delphix.com/job/appliance-build-orchestrator-pre-push/6558/

• Commit 2: git ab-pre-push: http://selfservice.jenkins.delphix.com/job/github/job/delphix/job/delphix-platform/job/appliance-build-orchestrator/job/pre-push/391/ ✅

[sebroy]

Is there a broader design that reviewers can review? For example, have we determined how we might want to use this in the future, and determined that this usage would be appropriate for the Delphix use-case? What filesystems or files would we scan? Does that scanning incur a performance overhead? Is that performance overhead acceptable? etc. etc...

[rasantel]

Is there a broader design that reviewers can review? For example, have we determined how we might want to use this in the future, and determined that this usage would be appropriate for the Delphix use-case? What filesystems or files would we scan? Does that scanning incur a performance overhead? Is that performance overhead acceptable? etc. etc...

@sebroy Good point. Here is a document: https://docs.google.com/document/d/1SfDRjePC_Ah6HW1VNbx0dNs2aVJbnEj45Wm0R2IuK5o/edit?usp=sharing