STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 must have the auditing package installed.

DISA Rule

SV-261410r996645_rule

Vulnerability Number

V-261410

Group Title

SRG-OS-000337-GPOS-00129

Rule Version

SLEM-05-653010

Severity

CAT II

CCI(s)

• CCI-001914 - Provide the capability for organization-defined individuals or roles to change the logging to be performed on organization-defined system components based on organization-defined selectable event criteria within organization-defined time thresholds.
• CCI-001875 - Provide an audit reduction capability that supports on-demand audit review and analysis.
• CCI-001877 - Provide an audit reduction capability that supports after-the-fact investigations of incidents.
• CCI-001878 - Provide a report generation capability that supports on-demand audit review and analysis.
• CCI-001879 - Provide a report generation capability that supports on-demand reporting requirements.
• CCI-001880 - Provide a report generation capability that supports after-the-fact investigations of security incidents.
• CCI-001881 - Provide an audit reduction capability that does not alter original content or time ordering of audit records.
• CCI-001882 - Provide a report generation capability that does not alter original content or time ordering of audit records.
• CCI-001889 - Record time stamps for audit records that meet organization-defined granularity of time measurement.
• CCI-001890 - Record time stamps for audit records that use Coordinated Universal Time, have a fixed local time offset from Coordinated Universal Time, or that include the local time offset as part of the time stamp.
• CCI-000172 - Generate audit records for the event types defined in AU-2 c that include the audit record content defined in AU-3.

Weight

10

Fix Recommendation

Install SLEM 5 auditing package with the following commands:

> sudo transactional-update pkg install audit
> sudo reboot

Check Contents

Verify SLEM 5 auditing package is installed with the following command:

> zypper info audit
Name : audit
Version : 2.8.5-3.2
Arch : X86_64
Vendor : SUSE LLC <https://www.suse.com>
Installed Size : 646.2 KiB
Installed : Yes (automatically)
Status : up-to-date

If the package "audit" is not installed on the system, this is a finding.

Vulnerability Number

V-261410

Documentable

False

Rule Version

SLEM-05-653010

Severity Override Guidance

Verify SLEM 5 auditing package is installed with the following command:

> zypper info audit
Name : audit
Version : 2.8.5-3.2
Arch : X86_64
Vendor : SUSE LLC <https://www.suse.com>
Installed Size : 646.2 KiB
Installed : Yes (automatically)
Status : up-to-date

If the package "audit" is not installed on the system, this is a finding.

Check Content Reference

M

Target Key

5596