Detections
Analytics

GEN002860 - Audit logs must be rotated daily.

Information

Rotate audit logs daily to preserve audit file system space and to conform to the DoD/DISA requirement. If it is not rotated daily and moved to another location, then there is more of a chance for the compromise of audit data by malicious users.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure a cron job or other automated process to rotate the audit logs on a daily basis.

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-4357r2_rule, STIG-ID|GEN002860, Vuln-ID|V-4357

Plugin: Unix

Control ID: ec5f18d5d655a8c3d55bfd2f2149012e7facff1db643bc2abe6d83c812255912