UCF STIG Viewer Logo

The /etc/syslog.conf file must be owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4393 GEN005400 SV-4393r2_rule ECLP-1 Medium
Description
If the /etc/syslog.conf file is not owned by root, unauthorized users could be allowed to view, edit, or delete important system messages handled by the syslog facility.
STIG Date
AIX 5.3 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2014-10-03

Details

Check Text ( C-8272r2_chk )
Check /etc/syslog.conf ownership.

# ls -lL /etc/syslog.conf

If /etc/syslog.conf is not owned by root, this is a finding.
Fix Text (F-4304r2_fix)
Use the chown command to set the owner to root.
# chown root /etc/syslog.conf