STIGQter: STIG Summary: Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide Version: 1 Release: 7 Benchmark Date: 01 Jul 2026:

AlmaLinux OS 9 must have the postfix package installed.

DISA Rule

SV-272485r1155265_rule

Vulnerability Number

V-272485

Group Title

SRG-OS-000304-GPOS-00121

Rule Version

ALMA-09-006845

Severity

CAT II

CCI(s)

• CCI-000015 - Support the management of system accounts using (organization-defined automated mechanisms).

Weight

10

Fix Recommendation

Install the postfix package with the following command:

$ sudo dnf install postfix

Check Contents

Note: If the admin can demonstrate that there is another system/service to send audit failure notifications to the administrator/ISSO, this control is not applicable.

Verify AlmaLinux OS 9 has the postfix package installed with the following command:

$ dnf list --installed postfix

Example output:

postfix.x86_64 2:3.5.9-24.el9 @AppStream

If the "postfix" package is not installed, this is a finding.

Vulnerability Number

V-272485

Documentable

False

Rule Version

ALMA-09-006845

Severity Override Guidance

Note: If the admin can demonstrate that there is another system/service to send audit failure notifications to the administrator/ISSO, this control is not applicable.

Verify AlmaLinux OS 9 has the postfix package installed with the following command:

$ dnf list --installed postfix

Example output:

postfix.x86_64 2:3.5.9-24.el9 @AppStream

If the "postfix" package is not installed, this is a finding.

Check Content Reference

M

Target Key

5664