STIGQter: STIG Summary: Red Hat Enterprise Linux 8 Security Technical Implementation Guide Version: 2 Release: 8 Benchmark Date: 01 Jul 2026:

RHEL 8 must be configured to allow sending email notifications of unauthorized configuration changes to designated personnel.

DISA Rule

SV-256974r1069321_rule

Vulnerability Number

V-256974

Group Title

SRG-OS-000363-GPOS-00150

Rule Version

RHEL-08-010358

Severity

CAT II

CCI(s)

• CCI-001744 - Implement organization-defined security responses automatically if baseline configurations are changed in an unauthorized manner.

Weight

10

Fix Recommendation

Install the "mailx" package on the system:

$ sudo yum install mailx

Check Contents

Verify that the operating system is configured to allow sending email notifications.

Note: The "mailx" package provides the "mail" command that is used to send email messages. The s-nail package is also suitable and may be used in place of mailx.

Verify that the "mailx" package is installed on the system:

$ sudo yum list installed mailx

mailx.x86_64 12.5-29.el8 @rhel-8-for-x86_64-baseos-rpm

If "mailx" package is not installed, this is a finding.

Vulnerability Number

V-256974

Documentable

False

Rule Version

RHEL-08-010358

Severity Override Guidance

Verify that the operating system is configured to allow sending email notifications.

Note: The "mailx" package provides the "mail" command that is used to send email messages. The s-nail package is also suitable and may be used in place of mailx.

Verify that the "mailx" package is installed on the system:

$ sudo yum list installed mailx

mailx.x86_64 12.5-29.el8 @rhel-8-for-x86_64-baseos-rpm

If "mailx" package is not installed, this is a finding.

Check Content Reference

M

Target Key

2921