Sendmail logging must not be set to less than nine in the sendmail.cf file.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-226936 | GEN004440 | SV-226936r603265_rule | Low |
| Description |
|---|
| If Sendmail is not configured to log at level 9, system logs may not contain the information necessary for tracking unauthorized use of the Sendmail service. |
| STIG | Date |
|---|---|
| Solaris 10 SPARC Security Technical Implementation Guide | 2022-09-07 |
Details
| Check Text ( C-29098r485117_chk ) |
|---|
| Check if Sendmail logging is set to level 9. Procedure: # grep "O L" /etc/mail/sendmail.cf OR # grep LogLevel /etc/mail/sendmail.cf If logging is set to less than 9, this is a finding. |
| Fix Text (F-29086r485118_fix) |
|---|
| Edit the sendmail.conf file, locate the "O L" or LogLevel entry and change it to 9. |