Detections
Analytics

1.2 OL09-00-000002

Information

OL 9 must use a separate file system for the system audit data path.

GROUP ID: V-271432
RULE ID: SV-271432r1091008

Placing "/var/log/audit" in its own partition enables better separation between audit files and other system files and helps ensure that auditing cannot be halted due to the partition running out of space.

Solution

Migrate the system audit data path onto a separate file system.

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, CCI|CCI-001849, Rule-ID|SV-271432r1091008_rule, STIG-ID|OL09-00-000002, Vuln-ID|V-271432

Plugin: Unix

Control ID: 1cd9c9ae2fe02405313533c4009833be4b8824613358c1e3afb0c6d79078b9c5