STIGQter: STIG Summary: Red Hat Enterprise Linux 9 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

RHEL 9 must have the Postfix package installed.

DISA Rule

SV-272488r1155665_rule

Vulnerability Number

V-272488

Group Title

SRG-OS-000304-GPOS-00121

Rule Version

RHEL-09-215101

Severity

CAT II

CCI(s)

• CCI-000015 - Support the management of system accounts using (organization-defined automated mechanisms).

Weight

10

Fix Recommendation

Install the Postfix package with the following command:

$ sudo dnf install postfix

Check Contents

Note: If the admin can demonstrate that there is another system/service to send audit failure notifications to the administrator/ISSO, this control is not applicable.

Verify RHEL 9 has the Postfix package installed with the following command:

$ sudo dnf list --installed postfix

Example output:

postfix.x86_64 2:3.5.25-1.el9

If the "postfix" package is not installed, this is a finding.

Vulnerability Number

V-272488

Documentable

False

Rule Version

RHEL-09-215101

Severity Override Guidance

Note: If the admin can demonstrate that there is another system/service to send audit failure notifications to the administrator/ISSO, this control is not applicable.

Verify RHEL 9 has the Postfix package installed with the following command:

$ sudo dnf list --installed postfix

Example output:

postfix.x86_64 2:3.5.25-1.el9

If the "postfix" package is not installed, this is a finding.

Check Content Reference

M

Target Key

5551