STIGQter: STIG Summary: Oracle Linux 6 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The postfix service must be enabled for mail delivery.

DISA Rule

SV-209020r603263_rule

Vulnerability Number

V-209020

Group Title

SRG-OS-000480

Rule Version

OL6-00-000287

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

The Postfix mail transfer agent is used for local mail delivery within the system. The default configuration only listens for connections to the default SMTP port (port 25) on the loopback interface (127.0.0.1). It is recommended to leave this service enabled for local mail delivery. The "postfix" service can be enabled with the following command:

# chkconfig postfix on
# service postfix start

Check Contents

Run the following command to determine the current status of the "postfix" service:

# service postfix status

If the service is enabled, it should return the following:

postfix is running...

If the service is not enabled, this is a finding.

Vulnerability Number

V-209020

Documentable

False

Rule Version

OL6-00-000287

Severity Override Guidance

Run the following command to determine the current status of the "postfix" service:

# service postfix status

If the service is enabled, it should return the following:

postfix is running...

If the service is not enabled, this is a finding.

Check Content Reference

M

Target Key

2928

Comments