STIGQter: STIG Summary: Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Mar 2026:

TOSS 5 must periodically flush audit records to disk to prevent the loss of audit records.

DISA Rule

SV-282430r1200270_rule

Vulnerability Number

V-282430

Group Title

SRG-OS-000051-GPOS-00024

Rule Version

TOSS-05-000403

Severity

CAT II

CCI(s)

• CCI-000154 - Provide the capability to centrally review and analyze audit records from multiple components within the system.

Weight

10

Fix Recommendation

Configure TOSS 5 to flush audit to disk by adding or updating the following rule in "/etc/audit/auditd.conf":

freq = 100

Restart the audit daemon for the changes to take effect.

Check Contents

Verify the audit system is configured to flush to disk after every 100 records using the following command:

$ sudo grep freq /etc/audit/auditd.conf

freq = 100

If "freq" isn't set to a value between "1" and "100", the value is missing, or the line is commented out, this is a finding.

Vulnerability Number

V-282430

Documentable

False

Rule Version

TOSS-05-000403

Severity Override Guidance

Verify the audit system is configured to flush to disk after every 100 records using the following command:

$ sudo grep freq /etc/audit/auditd.conf

freq = 100

If "freq" isn't set to a value between "1" and "100", the value is missing, or the line is commented out, this is a finding.

Check Content Reference

M

Target Key

5738