STIGQter: STIG Summary: BIND 9.x Security Technical Implementation Guide Version: 3 Release: 3 Benchmark Date: 01 Jul 2026:

The print-severity variable for the configuration of BIND 9.x server logs must be configured to produce audit records containing information to establish what type of events occurred.

DISA Rule

SV-272368r1123822_rule

Vulnerability Number

V-272368

Group Title

SRG-APP-000095-DNS-000006

Rule Version

BIND-9X-001050

Severity

CAT II

CCI(s)

• CCI-000130 - Ensure that audit records containing information that establishes what type of event occurred.

Weight

10

Fix Recommendation

Edit the "named.conf" file.

Add the "print-severity" substatement to the "channel" statement.

Configure the "print-severity" sub statement to "yes".

Restart the BIND 9.x process.

Check Contents

For each logging channel that is defined, verify that the "print-severity" substatement is listed.

Inspect the "named.conf" file for the following:

logging {
channel channel_name {
print-severity yes;
};
};

If the "print-severity" statement is missing, this is a finding.

If the "print-severity" statement is not set to "yes", this is a finding.

Vulnerability Number

V-272368

Documentable

False

Rule Version

BIND-9X-001050

Severity Override Guidance

For each logging channel that is defined, verify that the "print-severity" substatement is listed.

Inspect the "named.conf" file for the following:

logging {
channel channel_name {
print-severity yes;
};
};

If the "print-severity" statement is missing, this is a finding.

If the "print-severity" statement is not set to "yes", this is a finding.

Check Content Reference

M

Target Key

5687