Navigate

Check: RHEL-09-215095

RHEL 9 STIG: RHEL-09-215095 (in versions v1 r3 through v1 r2)

Title

RHEL 9 must have the s-nail package installed. (Cat II impact)

Discussion

The "s-nail" package provides the mail command required to allow sending email notifications of unauthorized configuration changes to designated personnel.

Check Content

Verify that RHEL 9 is configured to allow sending email notifications. Note: The "s-nail" package provides the "mail" command that is used to send email messages. Verify that the "s-nail" package is installed on the system: $ sudo dnf list --installed s-nail s-nail.x86_64 14.9.22-6.el9 If "s-nail" package is not installed, this is a finding.

Fix Text

The s-nail package can be installed with the following command: $ sudo dnf install s-nail

Additional Identifiers

Rule ID: SV-257842r942959_rule

Vulnerability ID: V-257842

Group Title: SRG-OS-000363-GPOS-00150

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-001744	The information system implements organization-defined security responses automatically if baseline configurations are changed in an unauthorized manner.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
CM-3 (5)	Automated Security Response