STIGQter: STIG Summary: Oracle Linux 8 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

OL 8 must be configured to allow sending email notifications of unauthorized configuration changes to designated personnel.

DISA Rule

SV-256979r958794_rule

Vulnerability Number

V-256979

Group Title

SRG-OS-000363-GPOS-00150

Rule Version

OL08-00-010358

Severity

CAT II

CCI(s)

• CCI-001744 - Implement organization-defined security responses automatically if baseline configurations are changed in an unauthorized manner.

Weight

10

Fix Recommendation

Install the "mailx" package on the system:

$ sudo yum install mailx

Check Contents

Verify that the operating system is configured to allow sending email notifications.

Note: The "mailx" package provides the "mail" command that is used to send email messages.

Verify that the "mailx" package is installed on the system:

$ sudo yum list installed mailx

mailx.x86_64 12.5-29.el8 @ol8_baseos_latest

If "mailx" package is not installed, this is a finding.

Vulnerability Number

V-256979

Documentable

False

Rule Version

OL08-00-010358

Severity Override Guidance

Verify that the operating system is configured to allow sending email notifications.

Note: The "mailx" package provides the "mail" command that is used to send email messages.

Verify that the "mailx" package is installed on the system:

$ sudo yum list installed mailx

mailx.x86_64 12.5-29.el8 @ol8_baseos_latest

If "mailx" package is not installed, this is a finding.

Check Content Reference

M

Target Key

5416