UCF STIG Viewer Logo

The SMTP service log files must be owned by root.


Finding ID Version Rule ID IA Controls Severity
V-89659 VRAU-SL-000600 SV-100309r1_rule Medium
If the SMTP service log file is not owned by root, then unauthorized personnel may modify or delete the file to hide a system compromise.
VMware vRealize Automation 7.x SLES Security Technical Implementation Guide 2018-10-12


Check Text ( C-89351r1_chk )
Check the permissions on the mail log files:

# ls -la /var/log/mail
# ls -la /var/log/mail.info
# ls -la /var/log/mail.warn
# ls -la /var/log/mail.err

If any mail log file is not owned by "root", this is a finding.
Fix Text (F-96401r1_fix)
Change the ownership of the sendmail log files:

# chown root