SOL-11.1-010380 - The audit system must alert the System Administrator (SA) if there is any type of audit failure.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version


Proper alerts to system administrators and Information Assurance (IA) officials of audit failures ensure a timely response to critical system issues.


The root role is required.

This action applies to the global zone only. Determine the zone that you are currently securing.

# zonename

If the command output is 'global', this action applies.

Add an audit_warn alias to /etc/mail/aliases that will forward to designated system administrator(s).

# pfedit /etc/mail/aliases

Insert a line in the form:

Put the updated aliases file into service.
# newaliases

See Also

Item Details

References: CAT|I, CCI|CCI-001858, Rule-ID|SV-219966r854529_rule, STIG-ID|SOL-11.1-010380, STIG-Legacy|SV-60717, STIG-Legacy|V-47843, Vuln-ID|V-219966

Plugin: Unix

Control ID: 286c62e93b580414cd0d66879268b8fd7659a0f50cd77e61c35727ad6693db5e