The SMTP service log file must be owned by root.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-837	GEN004480	SV-837r2_rule	ECLP-1	Medium

Description
If the SMTP service log file is not owned by root, then unauthorized personnel may modify or delete the file to hide a system compromise.

STIG	Date
AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE	2018-09-18

Details

Check Text ( C-8034r2_chk )
Locate any mail log files by checking the syslog configuration file. Procedure: # more /etc/syslog.conf Identify any log files configured for the mail service at any severity level, or those configured for all services. Check the ownership of these log files. Procedure: # ls -lL If any mail log file is not owned by root, this is a finding.

Fix Text (F-991r2_fix)
Change the ownership of the Sendmail log file. # chown root