Check: TANS-SV-000056
Tanium 7.0 STIG:
TANS-SV-000056
(in versions v1 r2 through v1 r1)
Title
The Tanium SQL Server RDBMS must be configured with sufficient free space to ensure audit logging is not impacted. (Cat II impact)
Discussion
In order to ensure Tanium has sufficient storage capacity in which to write the audit logs, the SQL Server RDMBS must be configured with sufficient free space. Consult the server sizing documents located at https://docs.tanium.com/platform_install/platform_install/reference_host_system_sizing_guidelines.html to determine how much free space should be allocated.
Check Content
Access the Tanium SQL Server interactively. Log on with an account with administrative privileges to the server. Consult server sizing documentation at https://docs.tanium.com/platform_install/platform_install/reference_host_system_sizing_guidelines.html and the Tanium system administrator to determine the recommended disk space sizing for the size of the Tanium deployment. Launch File Explorer. Check the total disk space allocated to the hard drive allocated for the Tanium SQL databases. Compare the allocated size against the recommended disk space sizing for the size of the Tanium deployment. If the allocated size is less than the recommended disk space, this is a finding.
Fix Text
Work with the Tanium System Administrator and/or database administrator to allocate additional disk space for the volume hosting the Tanium SQL databases.
Additional Identifiers
Rule ID: SV-93453r1_rule
Vulnerability ID: V-78747
Group Title: SRG-APP-000357
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-001849 |
The organization allocates audit record storage capacity in accordance with organization-defined audit record storage requirements. |
Controls
| Number | Title |
|---|---|
| AU-4 |
Audit Storage Capacity |