Red Hat Enterprise Linux 10 Security Technical Implementation Guide

The Red Hat Enterprise Linux 10 Security Technical Implementation Guide (V1 R3) has 435 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

435STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R3

CurrentPublished Wed Sep 30 2026

RHEL 10 must notify designated personnel if baseline configurations are changed in an unauthorized manner.

Red Hat Enterprise Linux 10 Security Technical Implementation Guide

Assessment Title

Rule Text

RHEL 10 must notify designated personnel if baseline configurations are changed in an unauthorized manner.

Description

Discussion Text

The "postfix" package provides the mail command required to allow sending email notifications of unauthorized configuration changes to designated personnel.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-280997

Rule

SV-280997r1195387_rule

Severity

medium

Rule Version

RHEL-10-200690

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify RHEL 10 is configured to allow sending email notifications.

Note: The "postfix" package provides the "mail" command that is used to send email messages.

Verify that the "postfix" package is installed on the system:

$ sudo dnf list --installed postfix
Installed Packages
postfix.x86_64                                         2:3.8.5-8.el10                                         @AppStream

If the "postfix" package is not installed, this is a finding.

Implementation Procedure

Fix Text

Configure RHEL 10 to notify designated personnel if baseline configurations are changed in an unauthorized manner.

Install the postfix package with the following command:

$ sudo dnf -y install postfix

STIG check 67 of 435 in the Red Hat Enterprise Linux 10 STIG checklist

← Previous · V-280996RHEL 10 must have the "libreswan" package installed.Next · V-280998 →RHEL 10 must have mail aliases to notify the information system security officer (ISSO) and system administrator (SA) (at a minimum) of an audit processing failure.