The operating system must configure auditing to reduce the likelihood of storage capacity being exceeded.

An XCCDF Rule

Details
Profiles

Description

Overflowing the audit storage area can result in a denial of service or system outage.

ID: SV-219968r958752_rule
Version: SOL-11.1-010410
Severity: High
References: CCI-001849
Updated: about 2 months ago

Remediation Templates

The Audit Control profile is required.

This action applies to the global zone only. Determine the zone that you are currently securing.

# zonename
If the command output is "global", this action applies.

Set the size of a binary audit file to a specific size. The size is specified in megabytes.

# pfexec auditconfig -setplugin audit_binfile p_fsize=4M

Restart the audit system.

# pfexec audit -s

The operating system must configure auditing to reduce the likelihood of storage capacity being exceeded.

Description

Remediation Templates

A Manual Procedure