Oracle Linux 6 Security Technical Implementation Guide

The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R7

CurrentPublished Thu Jan 26 2023

The mail system must forward all mail for root to one or more system administrators.

Oracle Linux 6 Security Technical Implementation Guide

Assessment Title

Rule Text

The mail system must forward all mail for root to one or more system administrators.

Description

Discussion Text

A number of system services utilize email messages sent to the root user to notify system administrators of active or impending issues. These messages must be forwarded to at least one monitored email address.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-209065

Rule

SV-209065r793786_rule

Severity

medium

Rule Version

OL6-00-000521

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Find the list of alias maps used by the Postfix mail server:

# postconf alias_maps

Query the Postfix alias maps for an alias for "root":

# postmap -q root hash:/etc/aliases

If there are no aliases configured for root that forward to a monitored email address, this is a finding.

Implementation Procedure

Fix Text

Set up an alias for root that forwards to a monitored email address:

# echo "root: <system.administrator>@mail.mil" >> /etc/aliases
# newaliases

STIG check 198 of 267 in the Oracle Linux 6 STIG checklist

← Previous · V-209064The system package management tool must verify contents of all files associated with packages.Next · V-209066 →Audit log files must be group-owned by root.