SRG-OS-000341-GPOS-00132

The operating system must allocate audit record storage capacity to store at least one week's worth of audit records, when audit records are not immediately sent to a central audit record storage facility.

Details
Associations

32 rules found Severity: Low

20 rules found Severity: Low

13 rules found Severity: Medium

SRG-OS-000341-GPOS-00132

Ensure /var/log/audit Located On Separate Partition

Extend Audit Backlog Limit for the Audit Daemon

Configure a Sufficiently Large Partition for Audit Logs