UCF STIG Viewer Logo

System audit logs must be group-owned by root, bin, or sys.


Overview

Finding ID Version Rule ID IA Controls Severity
V-226591 GEN002690 SV-226591r603265_rule Medium
Description
Sensitive system and user information could provide a malicious user with enough information to penetrate further into the system.
STIG Date
Solaris 10 SPARC Security Technical Implementation Guide 2020-12-04

Details

Check Text ( C-28752r483185_chk )
Determine the location of audit logs and then check the group-ownership.

Procedure:
# more /etc/security/audit_control
# ls -lLd

If any audit log file is not group-owned by root, bin, or sys, this is a finding.
Fix Text (F-28740r483186_fix)
Change the group ownership of the audit log file(s).

Procedure:
# chgrp root