Detections
Analytics

1.75 AZLX-23-002020

Information

Amazon Linux 2023 must use a separate file system for the system audit data path.

GROUP ID: V-274068RULE ID: SV-274068r1120192

Placing "/var/log/audit" in its own partition enables better separation between audit files and other system files and helps ensure that auditing cannot be halted due to the partition running out of space.

Solution

Configure Amazon Linux 2023 to have a separate file system/partition for the system audit data path.

Migrate the system audit data path onto a separate partition.

See Also

https://workbench.cisecurity.org/benchmarks/26107

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, CAT|III, CCI|CCI-001849, Rule-ID|SV-274068r1120192_rule, STIG-ID|AZLX-23-002020, Vuln-ID|V-274068

Plugin: Unix

Control ID: 3bd87e0112c122919ef6b5b922d0ea60ec8080a4ecfcaf2560327062d0e867dc