Sendmail logging must not be set to less than nine in the sendmail.cf file.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-835 | GEN004440 | SV-37497r2_rule | ECAR-1 ECAR-2 ECAR-3 | Low |
| Description |
|---|
| If Sendmail is not configured to log at level 9, system logs may not contain the information necessary for tracking unauthorized use of the sendmail service. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2014-07-02 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-31405r2_fix) |
|---|
| Edit the sendmail.cf file, locate the "O L" or "LogLevel" entry and change it to 9. |