Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-22454 | GEN005395 | SV-37710r2_rule | Medium |
Description |
---|
Unauthorized users must not be allowed to access or modify the /etc/syslog.conf file. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2017-01-27 |
Check Text ( None ) |
---|
None |
Fix Text (F-32087r2_fix) |
---|
Remove the extended ACL from the file. # setfacl --remove-all /etc/syslog.conf Or: # setfacl -- remove-all /etc/rsyslog.conf |