The SMTP service log files must be owned by root.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-89659	VRAU-SL-000600	SV-100309r1_rule		Medium

Description
If the SMTP service log file is not owned by root, then unauthorized personnel may modify or delete the file to hide a system compromise.

STIG	Date
VMware vRealize Automation 7.x SLES Security Technical Implementation Guide	2018-10-12

Details

Check Text ( C-89351r1_chk )
Check the permissions on the mail log files: # ls -la /var/log/mail # ls -la /var/log/mail.info # ls -la /var/log/mail.warn # ls -la /var/log/mail.err If any mail log file is not owned by "root", this is a finding.

Fix Text (F-96401r1_fix)
Change the ownership of the sendmail log files: # chown root