UCF STIG Viewer Logo

The AIX /etc/syslog.conf file must be owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-245561 AIX7-00-002144 SV-245561r818803_rule Medium
Description
Unauthorized ownership of the /etc/syslog.conf file can lead to the ability for a malicious actor to alter or disrupt system logging activities. This can aid the malicious actor in avoiding detection and further their ability to conduct malicious activities on the system.
STIG Date
IBM AIX 7.x Security Technical Implementation Guide 2022-06-06

Details

Check Text ( C-48840r818801_chk )
Check the ownership of /etc/syslog.conf using command:
# ls -al /etc/syslog.conf

The above command should yield the following output:
-rw-r----- 1 root system 993 Mar 11 07:04 /etc/syslog.conf

If the file is not owned by root, this is a finding.
Fix Text (F-48795r818802_fix)
Change the ownership of the file to root using command:
# chown root /etc/syslog.conf