Detections
Analytics

1.400 ALMA-09-051940

Information

AlmaLinux OS 9 must use a separate file system for the system audit data path.

GROUP ID: V-269507
RULE ID: SV-269507r1050390

Placing "/var/log/audit" in its own partition enables better separation between audit files and other system files, and helps ensure that auditing cannot be halted due to the partition running out of space.

Solution

Migrate the system audit data path onto a separate file system.

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, CCI|CCI-001849, Rule-ID|SV-269507r1050390_rule, STIG-ID|ALMA-09-051940, Vuln-ID|V-269507

Plugin: Unix

Control ID: a05d543d12bd3eacd7176127d66e3d9e955e7812bef361f7f6b9d605a8bfbd26