The SMTP service log file must have mode 0644 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-838	GEN004500	SV-35058r1_rule	ECLP-1	Medium

Description
If the SMTP service log file is more permissive than 0644, unauthorized users may be allowed to change the log file.

STIG	Date
HP-UX 11.31 Security Technical Implementation Guide	2018-09-14

Details

Check Text ( C-36567r1_chk )

Check the mode of the SMTP service log file. # cat /etc/syslog.conf | tr '\011' ' ' | tr -s ' ' | sed -e 's/^[ \t]*//' | grep -v "^#" | egrep -i "mail.info|mail.debug|mail.\*|\*.info|\*.debug|\*.\*" | cut -f 2,2 -d " " | uniq | xargs -n1 ls -lL Check the configuration to determine which log files contain logs for mail. # ls -lL If any Sendmail log file permissions are greater than 0644, this is a finding.

Fix Text (F-31935r1_fix)
Change the mode of the SMTP service log file. # chmod 0644