STIGQter: STIG Summary: Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide Version: 1 Release: 7 Benchmark Date: 01 Jul 2026:

AlmaLinux OS 9 must use a separate file system for the system audit data path.

DISA Rule

SV-269507r1050390_rule

Vulnerability Number

V-269507

Group Title

SRG-OS-000341-GPOS-00132

Rule Version

ALMA-09-051940

Severity

CAT III

CCI(s)

• CCI-001849 - Allocate audit log storage capacity to accommodate organization-defined audit record retention requirements.

Weight

10

Fix Recommendation

Migrate the system audit data path onto a separate file system.

Check Contents

Verify that a separate file system/partition has been created for the system audit data path with the following command:

Note: /var/log/audit is used as the example as it is a common location.

$ findmnt /var/log/audit

TARGET SOURCE FSTYPE OPTIONS
/var/log/audit /dev/mapper/luks-29b74747-2f82-4472-82f5-0b5eb763effc xfs rw,nosuid,nodev,noexec,relatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota

If no line is returned, this is a finding.

Vulnerability Number

V-269507

Documentable

False

Rule Version

ALMA-09-051940

Severity Override Guidance

Verify that a separate file system/partition has been created for the system audit data path with the following command:

Note: /var/log/audit is used as the example as it is a common location.

$ findmnt /var/log/audit

TARGET SOURCE FSTYPE OPTIONS
/var/log/audit /dev/mapper/luks-29b74747-2f82-4472-82f5-0b5eb763effc xfs rw,nosuid,nodev,noexec,relatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota

If no line is returned, this is a finding.

Check Content Reference

M

Target Key

5664