The system must use a separate file system for the system audit data path.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-226901	GEN003623	SV-226901r603265_rule		Low

Description
The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.

STIG	Date
Solaris 10 SPARC Security Technical Implementation Guide	2022-09-07

Details

Check Text ( C-29063r484990_chk )
Determine the audit log data path. # grep "^dir:" /etc/security/audit_control Determine if the audit log data path is a separate filesystem. # df -h If the returned mount point is "/" this is a finding.

Fix Text (F-29051r484991_fix)
Migrate the system audit data path onto a separate file system.