Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
RHEL-06-000512-PF | RHEL-06-000512-PF | RHEL-06-000512-PF_rule | Medium |
Description |
---|
Administrators should be made aware of an inability to record audit records. If a separate partition or logical audit storage volume is full, the SA and other designated staff must be notified. Sending an email when the volume is filled is not supported by the RHEL6 auditd service. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 6 Security Technical Implementation Guide | 2013-02-05 |
Check Text ( C-RHEL-06-000512-PF_chk ) |
---|
RHEL6 does not support this requirement. This is a permanent finding. |
Fix Text (F-RHEL-06-000512-PF_fix) |
---|
This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented but this finding cannot be considered fixed. |