Application gateways functioning as part of a cross domain solution must have the capability to implement journaling.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000511-ALG-000052	SRG-NET-000511-ALG-000052	SRG-NET-000511-ALG-000052_rule		Medium

Description
Ensure the CDS is capable of implementing journaling. Notes: A journaling file system is a file system that keeps track of the changes that will be made in a journal (usually a circular log in a dedicated area of the file system) before committing them to the main file system. In the event of a system crash or power failure, such file systems are quicker to bring back online and less likely to become corrupted. The internal format of the journal must guard against crashes while the journal itself is being written to. Many journal implementations (such as the JBD2 layer in ext4) bracket every change logged with a checksum, on the understanding that a crash would leave a partially written change with a missing (or mismatched) checksum that can simply be ignored when replaying the journal at next remount.

Description

Ensure the CDS is capable of implementing journaling. Notes: A journaling file system is a file system that keeps track of the changes that will be made in a journal (usually a circular log in a dedicated area of the file system) before committing them to the main file system. In the event of a system crash or power failure, such file systems are quicker to bring back online and less likely to become corrupted. The internal format of the journal must guard against crashes while the journal itself is being written to. Many journal implementations (such as the JBD2 layer in ext4) bracket every change logged with a checksum, on the understanding that a crash would leave a partially written change with a missing (or mismatched) checksum that can simply be ignored when replaying the journal at next remount.

STIG	Date
Application Layer Gateway Security Requirements Guide	2014-06-27

Details

Check Text ( C-SRG-NET-000511-ALG-000052_chk )
Verify the ALG has the capability to implement journaling. If the ALG does not have the capability to implement journaling, this is a finding.

Fix Text (F-SRG-NET-000511-ALG-000052_fix)
Configure the ALG to provide the capability to implement journaling.