Navigate

Check: RHEL-06-000287

Red Hat Enterprise Linux 6 STIG: RHEL-06-000287 (in versions v2 r2 through v1 r14)

Title

The postfix service must be enabled for mail delivery. (Cat III impact)

Discussion

Local mail delivery is essential to some system maintenance and notification tasks.

Check Content

Run the following command to determine the current status of the "postfix" service: # service postfix status If the service is enabled, it should return the following: postfix is running... If the service is not enabled, this is a finding.

Fix Text

The Postfix mail transfer agent is used for local mail delivery within the system. The default configuration only listens for connections to the default SMTP port (port 25) on the loopback interface (127.0.0.1). It is recommended to leave this service enabled for local mail delivery. The "postfix" service can be enabled with the following command: # chkconfig postfix on # service postfix start

Additional Identifiers

Rule ID: SV-218037r603264_rule

Vulnerability ID: V-218037

Group Title: SRG-OS-000480

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000366	The organization implements the security configuration settings.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
CM-6	Configuration Settings