Oracle Linux 6 Security Technical Implementation Guide

The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R7

CurrentPublished Thu Jan 26 2023

The audit system must identify staff members to receive notifications of audit log storage volume capacity issues.

Oracle Linux 6 Security Technical Implementation Guide

Assessment Title

Rule Text

The audit system must identify staff members to receive notifications of audit log storage volume capacity issues.

Description

Discussion Text

Email sent to the root account is typically aliased to the administrators of the system, who can take appropriate action.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-209032

Rule

SV-209032r793753_rule

Severity

medium

Rule Version

OL6-00-000313

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Inspect "/etc/audit/auditd.conf" and locate the following line to determine if the system is configured to send email to an account when it needs to notify an administrator: 

action_mail_acct = root

If auditd is not configured to send emails per identified actions, this is a finding.

Implementation Procedure

Fix Text

The "auditd" service can be configured to send email to a designated account in certain situations. Add or correct the following line in "/etc/audit/auditd.conf" to ensure that administrators are notified via email for those situations: 

action_mail_acct = root

STIG check 165 of 267 in the Oracle Linux 6 STIG checklist

← Previous · V-209031The NFS server must not have the insecure file locking option enabled.Next · V-209033 →The system must limit users to 10 simultaneous system logins, or a site-defined number, in accordance with operational requirements.