System log files must have the correct permissions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-51385	OSX8-00-00820	SV-65595r1_rule		Medium

Description
System log files should have the correct permissions.

STIG	Date
Apple OS X 10.8 (Mountain Lion) Workstation STIG	2015-02-10

Details

Check Text ( C-53721r1_chk )
This command checks for log files that exist on the system and prints out the log with corresponding permissions. stat -f "%A:%N" `grep -v "^#" /etc/newsyslog.conf | awk '{ print $1 }'` 2> /dev/null The correct permissions should be "640" or less permissive. Any file with more permissive settings is a finding.

Fix Text (F-56183r1_fix)
For any log file that returns an incorrect permission value, run the following command: chmod 640 [log file] where [log file] is the full path to the log file in question.