RHEL 10 must have the "s-nail" package installed.

STIG ID: RHEL-10-200520  |  SRG: SRG-OS-000363-GPOS-00150 |  Severity: medium (CAT II)  |  CCI: CCI-001744 |  Vulnerability Id: V-280954

Vulnerability Discussion

The "s-nail" package provides the mail command required to allow sending email notifications of unauthorized configuration changes to designated personnel.

Check

Verify RHEL 10 is configured to allow sending email notifications.

Verify the "s-nail" package is installed on the system with the following command:

$ sudo dnf list --installed s-nail
Installed Packages
s-nail.x86_64 14.9.24-12.el10 @rhel-10-for-x86_64-appstream-rpms

If the "s-nail" package is not installed, this is a finding.

Fix

Configure RHEL 10 to have the "s-nail" package installed with the following command:

$ sudo dnf -y install s-nail
This website is not created by, run, approved, or endorsed by the U.S. Department of Defense. Use at your own risk. This website is created by open-source software.