Details

NOTE: Update LOG_FILE_SIZE with the appropriate value forthe local environment.

Solution

Set the max_log_file parameter in /etc/audit/auditd.confmax_log_file =
Note- MB is the number of MegaBytes the file can be.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/91

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Unix.

References

• 800-53|AU-4
• CSCv6|6.3

Source

• Tenable.com/audits