[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255227

 
 

909

 
 

198741

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Ensure separate partition exists for audit data path

ID: oval:org.secpod.oval:def:84432Date: (C)2022-09-26   (M)2023-05-09
Class: COMPLIANCEFamily: unix




There are two important reasons to ensure that data gathered by is stored on a separate partition: protection against resource exhaustion (since the audit.log file can grow quite large) and protection of audit data. The audit daemon calculates how much free space is left and performs actions based on the results. If other processes (such as syslog) consume space in the same partition as auditd, it may not perform as desired.

Platform:
SUSE Linux Enterprise Server 15
Reference:
CCE-96218-3
CPE    1
cpe:/o:suse:suse_linux_enterprise_server:15
CCE    1
CCE-96218-3
XCCDF    1
xccdf_org.secpod_benchmark_general_SLES_15

© SecPod Technologies