STIGQter: STIG Summary: SUSE Linux Enterprise Server 15 Security Technical Implementation Guide Version: 2 Release: 8 Benchmark Date: 01 Jul 2026:

The SUSE operating system audit event multiplexor must be configured to use Kerberos.

DISA Rule

SV-234967r1009567_rule

Vulnerability Number

V-234967

Group Title

SRG-OS-000342-GPOS-00133

Rule Version

SLES-15-030680

Severity

CAT III

CCI(s)

• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

10

Fix Recommendation

Configure the SUSE operating system audit event multiplexor to use Kerberos by editing the "/etc/audit/audisp-remote.conf" file.

Edit or add the following line to match the text below:

transport = krb5

Check Contents

Determine if the SUSE operating system audit event multiplexor is configured to use Kerberos by running the following command:

> sudo grep transport /etc/audit/audisp-remote.conf
transport = krb5

If "transport" is not set to "krb5", or is commented out, this is a finding.

Vulnerability Number

V-234967

Documentable

False

Rule Version

SLES-15-030680

Severity Override Guidance

Determine if the SUSE operating system audit event multiplexor is configured to use Kerberos by running the following command:

> sudo grep transport /etc/audit/audisp-remote.conf
transport = krb5

If "transport" is not set to "krb5", or is commented out, this is a finding.

Check Content Reference

M

Target Key

5274