STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must notify designated personnel if baseline configurations are changed in an unauthorized manner.

DISA Rule

SV-280997r1195387_rule

Vulnerability Number

V-280997

Group Title

SRG-OS-000046-GPOS-00022

Rule Version

RHEL-10-200690

Severity

CAT II

CCI(s)

• CCI-000139 - Alert organization-defined personnel or roles within an organization-defined time period in the event of an audit logging process failure.

Weight

10

Fix Recommendation

Configure RHEL 10 to notify designated personnel if baseline configurations are changed in an unauthorized manner.

Install the postfix package with the following command:

$ sudo dnf -y install postfix

Check Contents

Verify RHEL 10 is configured to allow sending email notifications.

Note: The "postfix" package provides the "mail" command that is used to send email messages.

Verify that the "postfix" package is installed on the system:

$ sudo dnf list --installed postfix
Installed Packages
postfix.x86_64 2:3.8.5-8.el10 @AppStream

If the "postfix" package is not installed, this is a finding.

Vulnerability Number

V-280997

Documentable

False

Rule Version

RHEL-10-200690

Severity Override Guidance

Verify RHEL 10 is configured to allow sending email notifications.

Note: The "postfix" package provides the "mail" command that is used to send email messages.

Verify that the "postfix" package is installed on the system:

$ sudo dnf list --installed postfix
Installed Packages
postfix.x86_64 2:3.8.5-8.el10 @AppStream

If the "postfix" package is not installed, this is a finding.

Check Content Reference

M

Target Key

5733