Check: RHEL-09-215095
RHEL 9 STIG:
RHEL-09-215095
(in version v2 r3)
Title
RHEL 9 must have the s-nail package installed. (Cat II impact)
Discussion
The "s-nail" package provides the mail command required to allow sending email notifications of unauthorized configuration changes to designated personnel.
Check Content
Verify that RHEL 9 is configured to allow sending email notifications. Note: The "s-nail" package provides the "mail" command that is used to send email messages. Verify that the "s-nail" package is installed on the system: $ dnf list --installed s-nail s-nail.x86_64 14.9.22-6.el9 If "s-nail" package is not installed, this is a finding.
Fix Text
The s-nail package can be installed with the following command: $ sudo dnf install s-nail
Additional Identifiers
Rule ID: SV-257842r1044916_rule
Vulnerability ID: V-257842
Group Title: SRG-OS-000363-GPOS-00150
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001744 |
Implement organization-defined security responses automatically if baseline configurations are changed in an unauthorized manner. |
Controls
Number | Title |
---|---|
CM-3(5) |
Automated Security Response |