OpenControls Logo

STIG Viewer

STIGViewer Support

The operating system must configure auditing to reduce the likelihood of storage capacity being exceeded.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-219968SOL-11.1-010410SV-219968r1207680_ruleCCI-001849high
Description
Overflowing the audit storage area can result in a denial of service or system outage.
STIGDate
Solaris 11 SPARC Security Technical Implementation Guide2026-05-13

Related Frameworks

1 mapping across 3 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

MON-04Event Log Storage Capacity
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (14) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AU-12Audit Record Generation
1.00
AU-14(1)System Start-up
1.00
AU-3Content of Audit Records
1.00
AU-3(1)Additional Audit Information
1.00
AU-4Audit Log Storage Capacity
1.00
AU-4(1)Transfer to Alternate Storage
1.00
AU-5Response to Audit Logging Process Failures
1.00
AU-5(1)Storage Capacity Warning
1.00
AU-5(2)Real-time Alerts
1.00
AU-7Audit Record Reduction and Report Generation
1.00

+4 more (top 10 by confidence shown)

CCI1 mapping
CCI-001849
1.00

Details

Check Text (C-219968r1207680_chk)

The Audit Configuration profile is required. This check applies to the global zone only. Determine the zone that is currently being secured. # zonename If the command output is "global", this check applies. Check the status of the audit system. It must be auditing. # pfexec auditconfig -getplugin p_fsize=4M (example output) If the output of this command does not contain a specific file size, this is a finding.

Fix Text (F-21677r1207679_fix)

The Audit Control profile is required. This action applies to the global zone only. Determine the zone that is currently being secured. # zonename If the command output is "global", this action applies. Set the size of a binary audit file to a specific size. The size is specified in megabytes. The example below shows “4M” (4 megabytes) as a suggested value. # pfexec auditconfig -setplugin audit_binfile p_fsize=4M Restart the audit system. # pfexec audit -s